Kali

You can expose Kali Linux security tools through an MCP server to enable AI assistants to perform security assessments and testing. This setup bridges Kali’s extensive toolset with an MCP client, allowing you to run targeted actions from your AI workflow with a clean, centralized interface.

How to use

Start the MCP-enabled Kali server components so your MCP client can access the Kali toolset. You will typically run a Kali API server that exposes the tools, and an MCP HTTP bridge that your client uses to communicate with that API. From your MCP client, configure the Kali server endpoint so your AI assistant can request actions such as network scans, web security checks, password-guessing attempts, exploitation workflows, wireless assessments, Windows/AD interactions, OSINT data gathering, and forensics utilities. Once configured, you can issue high-level intents (for example: run a network scan on a target, enumerate web vulnerabilities, or extract OSINT data) and have the MCP layer route these requests to the appropriate Kali tool and return results back to you.

Typical usage flow includes starting the Kali API server, launching the MCP HTTP bridge, and then wiring your MCP client to the bridge URL. Ensure that the Kali environment is available (either via Docker or a Kali Linux host) and that the bridge is reachable from your client. The result is an integrated workflow where AI-driven prompts execute concrete security tasks through Kali’s toolchain.

How to install

Prerequisites: you need Python 3.8 or higher and Docker if you prefer containerized deployment. You should operate in a Kali Linux environment for the manual setup flow.

Option A — Docker (recommended): you will start the Kali API server and run the MCP HTTP bridge inside containers.

# Start Kali API server
make run

# Or run directly with docker-compose
docker-compose up -d
python mcp_http_server.py

Option B — Manual setup (Kali Linux): install Python dependencies, run the Kali API server, then start the MCP HTTP server connecting to the Kali API.

# Install dependencies
pip install -r requirements.txt

# Run Kali API server (requires Kali Linux)
python kali_server.py

# Run MCP HTTP server
python mcp_http_server.py --kali-server http://localhost:5001

Configure the MCP client to connect to the Kali server

Add the Kali server endpoint to your MCP client configuration so your AI assistant can send requests to Kali through the MCP bridge.

{
  "mcpServers": {
    "kali-tools": {
      "url": "http://localhost:5002/sse"
    }
  }
}

Available tools

nmap

Network scanning tool for host discovery and port scanning.

masscan

Fast network scanner optimized for large networks.

netdiscover

ARP discovery tool to identify devices on local networks.

hping3

TCP/IP packet crafting tool for network testing.

tcpdump

Command-line packet analyzer for network troubleshooting.

tshark

CLI version of Wireshark for protocol analysis.

gobuster

Directory/file enumeration against web servers.

nikto

Web server vulnerability scanner.

sqlmap

Automated SQL injection and database takeover tool.

wpscan

WordPress vulnerability scanner.

burpsuite

Web security testing suite for manual/protocol analysis (instrumented setup).

zap

OWASP ZAP for automated security testing of web apps.

ffuf

Fuzzing tool for web content discovery.

nuclei

Extensible vulnerability scanner using templates.

hydra

Versatile password-cracking tool for brute-forcing services.

john

John the Ripper password cracker.

hashcat

Advanced password recovery tool leveraging GPU acceleration.

medusa

Parallel, modular password cracker for network services.

crackmapexec

Post-exploitation tool for Windows networks and credentials.

metasploit

Framework for developing and executing exploit payloads.

searchsploit

Local exploit database lookup for vulnerability context.

beef

Browser Exploitation Framework for client-side vulnerabilities.

routersploit

Exploit framework focused on router vulnerabilities.

aircrack-ng

Suite for auditing wireless network security and cracking WEP/WPA keys.

reaver

WPS attack tool for accessing WPA networks.

wifite

Automated wireless auditor for multiple targets.

kismet

Wireless network detector and sniffer.

enum4linux

Enumeration tool for Windows networking information.

impacket

Python toolkit for working with Windows protocols.

evil-winrm

Remote Windows command shell for post-exploitation.

kerbrute

Kerberos-based user enumeration tool.

mimikatz

Credential extraction and manipulation on Windows.

responder

Lateral movement tool for NetBIOS/SMB/Net user discovery.

theharvester

OSINT collection tool for emails, subdomains, and names.

shodan

Search engine for internet-connected devices.

spiderfoot

OSINT automation tool for threat intelligence.

amass

Passive/active OSINT enumeration for domain mapping.

sublist3r

Subdomain enumeration tool.

binwalk

Firmware analysis tool for extracting embedded data.

foremost

Carve data from disk images or files.

netcat

Simple networking utility for reading/writing data across networks.

socat

SOcket CAT—multipurpose networking tool.

msfvenom

Payload generator for Metasploit payloads.

proxychains

Force network connections through a proxy chain.

apktool

Reverse engineering tool for Android APKs.