kali-mcp

kali-mcp is an MCP server, listed under security. Its repository has 26 GitHub stars; we last read it on 2026-10-22.

This project provides a Docker containerized MCP server running on Kali Linux, enabling AI assistants to access security and penetration testing tools. The server uses Server-Sent Events (SSE) to communicate and allows AI to execute commands in a controlled environment.

MCP servers are packaged differently from each other -- some run via npx, some as a Docker image, some as a plain script you clone and run. kali-mcp’s own README did not state one plainly enough for this page to quote it rather than guess, so it will not guess. The repository below states it.

22 tools documented in its README. An AI client calls these by name.

fetch

Fetch and analyze web content from URLs

resources

List available system resources and command examples

port_scan

Smart nmap wrapper with scan presets (quick, full, stealth, udp, service, aggressive)

dns_enum

Comprehensive DNS enumeration with zone transfer attempts

network_discovery

Multi-stage network reconnaissance and discovery

subdomain_enum

Subdomain enumeration using subfinder, amass, waybackurls

recon_auto

Automated multi-stage reconnaissance pipeline

vulnerability_scan

Automated vulnerability assessment with multiple tools

web_enumeration

Web application discovery and enumeration

web_audit

Comprehensive web application security audit

spider_website

Web crawling and spidering using gospider

form_analysis

Discover and analyze web forms

header_analysis

HTTP header security analysis

ssl_analysis

SSL/TLS security assessment using testssl.sh

hydra_attack

Brute-force credential testing via hydra (SSH, FTP, HTTP, SMB, MySQL, RDP, etc.)

credential_store

Store/retrieve discovered credentials tied to sessions

encode_decode

Encoding utility

hash_identify

Identify hash types by regex and returns Hashcat mode numbers and John format names

enum_shares

Share enumeration

parse_nmap

Parse both text and XML nmap output into structured JSON

parse_tool_output

Auto-detects and parses output from nikto, gobuster, dirb, hydra, or sqlmap

reverse_shell

Generate ready-to-use reverse shell commands with listener hints

Read from the README; names are kept only if the README contains them.

Ranked by services in common with kali-mcp, then by stars. Figures are from each repository when we last read it.

What does kali-mcp do?

This project provides a Docker containerized MCP server running on Kali Linux, enabling AI assistants to access security and penetration testing tools. The server uses Server-Sent Events (SSE) to communicate and allows AI to execute commands in a controlled environment.

How do I install kali-mcp?

Its README did not state an install command plainly enough for us to quote one, so we do not guess. The repository has the instructions: https://github.com/k3nn3dy-ai/kali-mcp

Is kali-mcp official and is it maintained?

We found nothing naming it as a vendor’s official server. Its repository has 26 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-03-07.

What licence does kali-mcp use?

The repository metadata we read does not state a licence, so check the repository before you rely on it.

• ida-pro-mcp13,080 stars
• mcp-shodan178 stars
• mcp-server-idapro103 stars
• search-solodit-mcp42 stars
• opencti-mcp40 stars
• MalwareBazaar_MCP30 stars

All security entries →

• Introduction to Model Context Protocol (Claude Academy)
• The Hugging Face MCP course
• Build an AI agent: a path with skills and MCP servers to practise on