Kali MCP Server
Execute Linux terminal commands and offensive security tools via AI agents.
Data last scanned today · Reviewed today
Overview
Kali MCP Server acts as an API bridge for MCP-compliant clients to interact directly with a Linux terminal. It allows AI models to run standard command-line utilities for reconnaissance, web application analysis, and automated penetration testing tasks. The server supports a suite of security-focused tools including Nmap, Metasploit-Framework, Hydra, sqlmap, and John the Ripper. By enabling raw command execution and request handling, it assists users in automating CTF challenges and managing complex security workflows through conversational AI interfaces.
Our verdict
This server carries a high risk level with a security score of 34/100. It is community-maintained rather than vendor-supported, and its read-only capabilities and authentication methods have not been editorially reviewed. Given that it specifically exposes terminal command execution to an AI agent, users should exercise extreme caution, ensuring it is only deployed in isolated, non-production environments where the risk of arbitrary command execution is acceptable.
- Supports a wide range of standard penetration testing tools.
- Zero direct dependencies reduces the supply-chain surface.
- Provides documented examples for CTF challenge solving.
- High security risk due to arbitrary command execution potential.
- Lacks external security review or official vendor maintenance.
- Authentication and read-only mode safety remain unverified.
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›What tools are pre-integrated into the MCP Kali Server?
The server natively supports tools including Nmap, Metasploit-Framework, SQLMap, John the Ripper, Hydra, Nikto, WPScan, Dirb, enum4linux, and gobuster, alongside generic raw terminal command execution.
›Can I run this server on a machine other than my local Kali device?
Yes, you can run the server on a separate machine, but it is strongly recommended to use an SSH tunnel to secure the connection to the MCP client rather than exposing the server on your network.
›What are the security implications of changing the bind IP address?
Using the default 127.0.0.1 IP binds the server to localhost, which is secure. Using 0.0.0.0 exposes the server to all network interfaces and is considered dangerous.
›How do I connect the MCP client to the server when they are on the same machine?
If running locally on your Kali machine, you can launch the client pointing to the local server address, typically http://127.0.0.1:5000.
›Does the server require specific dependencies to run from source?
Yes, you must have Python 3 installed to create a virtual environment and use the provided requirements.txt file to install necessary dependencies.
Alternatives
Changelog
- Improved
Badge
Maintain this server? Add the live badge to your README.