Kali

You can run Kali Linux penetration testing tools in isolated Docker containers through a dedicated MCP server. This setup lets you access a complete Kali toolkit via a simple MCP interface, keeping host systems clean while giving you comprehensive testing capabilities.

How to use

Connect to the MCP server from your MCP client and select the kali tools you need. You can start the Kali container, execute any Kali command inside the container, install or update Kali packages, and perform targeted scans or recon in an isolated environment. Each tool corresponds to a specific operation (for example network scans, web app testing, password cracking, or forensics), and you can run commands directly or group related tasks into workflows for repeatable testing.

How to install

# Global Installation (Recommended)
npm install -g kali-mcp-server

# Local Installation
git clone <repository-url>
cd kali-mcp-server
npm install
npm start

Configuration and usage notes

Configure the MCP by adding the following configuration block to your MCP settings. This defines a Kali MCP server that runs via npx and loads the kali-mcp-server package within the containerized environment.

{
  "mcpServers": {
    "kali": {
      "command": "npx",
      "args": ["-y", "kali-mcp-server"]
    }
  }
}

Security and lifecycle notes

Commands execute inside the Kali container and avoid touching the host system. Containers are isolated, and you can rely on a full audit trail of executed commands with automatic cleanup of containers when they are no longer needed.

Available tools

run_kali_command

Execute any command inside the Kali container to perform ad hoc tasks or run specific Kali tools.

start_kali_container

Initialize and start the Kali container to be used for subsequent operations.

stop_kali_container

Stop the running Kali container to free up resources.

kali_container_status

Check the current status of the Kali container (running, stopped, etc.).

install_kali_package

Install Kali packages via the system's package manager within the container.

update_kali_system

Update Kali system packages to their latest versions.

kali_network_scan

Perform network scanning using tools like nmap or masscan inside Kali.

kali_service_scan

Enumerate services on detected hosts to identify open ports and services.

kali_information_gathering

Gather OSINT and reconnaissance data (whois, dnsrecon, theharvester) from target domains.

kali_vulnerability_scan

Run vulnerability scans with tools like nikto, dirb, and gobuster inside Kali.

kali_web_scan

Test web applications using tools such as sqlmap, dirb, nikto, and wpscan.

kali_password_crack

Utilize password cracking tools like john, hashcat, and hydra for credential testing.

kali_wireless_tools

Analyze wireless networks with tools like airodump-ng and aireplay-ng.

kali_forensics

Conduct digital forensics using volatility, autopsy, and binwalk.

kali_exploitation

Explore exploitation toolsets (Metasploit, Searchsploit) for exploit development and testing.

kali_social_engineering

Access social engineering tools (SET, King Phisher) for phishing and credential harvesting scenarios.

kali_reverse_engineering

Perform reverse engineering with tools like radare2, gdb, strace, ltrace, checksec, and patchelf.

kali_stress_testing

Conduct stress and DoS testing with tools like slowloris and torshammer.

kali_sniffing_spoofing

Capture and analyze traffic with sniffing tools (Wireshark, tcpdump) and spoofing utilities like arpspoof.

run_kali_command

Execute any Kali command directly from the MCP interface.