MCP Kali Server
A bridge between an MCP client and a Kali Linux terminal so the agent can run nmap, sqlmap, hydra and other tools for authorized pentesting and CTF
- 872 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- Runs arbitrary commands in a Kali terminal
- Built for offensive security; use only on your own systems and with authorization
- A server exposed on an external interface grants remote shell access
Install
- Works in
Manual install
sudo apt install mcp-kali-server
kali-server-mcpOn the Kali box: install via the OS package and start the API server.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Runs arbitrary commands in a Kali terminal
- Built for offensive security; use only on your own systems and with authorization
- A server exposed on an external interface grants remote shell access
This is third-party code. Review the repository files before installing.
What it does
The project pairs an API server that runs on the Kali box with an MCP client that connects an AI agent to it. The server exposes controlled terminal access and a set of tools: dirb, enum4linux, gobuster, hydra, john, metasploit, nikto, nmap, sqlmap, wpscan, plus arbitrary commands. The agent proposes and runs commands, reads the output and continues recon or exploitation. By default the server binds to localhost only, and the authors recommend an SSH tunnel for remote use.
Who it is for. For offensive security specialists and CTF players who test their own infrastructure.
Good fit when
- You want the agent to handle recon and routine pentest steps on your own lab
- You solve CTF and want the agent to pick commands itself
- You need Kali terminal access from an MCP client
Not a fit when
- You have no written permission to test the target
- The target belongs to a third party without authorization
- You cannot expose the server on an external interface without protection
Example request
Scan my lab host at 127.0.0.1 with nmap and suggest the next stepMCP
- Transport
- stdio
- Authentication
- not required
Limitations
The server runs commands in a Kali terminal, so it must not be opened to an untrusted network: binding to 0.0.0.0 without a tunnel is dangerous. It needs the Kali tools installed and a configured MCP client. Model API keys for OpenAI, Anthropic and similar are configured separately in the client.
How to disable. Stop the server.py and client.py processes and remove the MCP entry from the client config. The OS package is removed with the standard package manager.
FAQ
Is it safe to expose on the network?
No. By default the server listens on localhost. The authors advise against binding to 0.0.0.0; use an SSH tunnel for remote work.
Which clients work with it?
MCP clients such as Claude Desktop and 5ire; the repository ships an example configuration.
Discussion
No questions or reviews yet.
Related
MCP serversAn offensive security MCP server: the agent runs 150+ pentest and recon tools and drives automated target assessments
An MCP server that gives the agent vulnerability triage: NVD data, EPSS, the CISA KEV catalog, MITRE ATT&CK mapping and one-call CVE risk scoring
cvENGINE finds a domain's exposed assets and the vulnerabilities being exploited, and its MCP server drives scans from Claude Code
Security scanner for MCP servers that looks for hardcoded keys, tool poisoning and injection flaws in repository code.
MCP Observatory: security testing for MCP servers
MCP Observatory
An MCP server scanner: checks schemas, drift and attack behavior, runs in CI and as an MCP server for agents
Self-hosted AI pentesting framework: attack surface graph, Kali sandbox, human approval gates and an MCP server you can drive from Claude Code
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| MCP Kali Server (this card) | no | not required | 872 | |
| kubectl-mcp-server | no | not required | 972 | reads cluster state and diagnoses pod failures |
| Unreal Engine MCP Server | no | not required | 1,033 | Unreal Engine assets, actors and blueprints |
| Android MCP | no | not required | 924 | controls an Android device through ADB |
README in short
The README covers install via an OS package and from source, server run options (address, port, debug mode) and client setup locally or over an SSH tunnel. It gives examples for Claude Desktop and 5ire and walkthroughs for web CTF and HTB machines. It also notes forensics options through Volatility and SleuthKit. It ends with a disclaimer: legal and ethical testing only.