Secure MCP server exposing Kali Linux tools via MCP and HTTP API for LLM-enabled workflows.
Configuration
View docs{
"mcpServers": {
"kali_mcp": {
"command": "python",
"args": [
"server.py"
],
"env": {
"MAX_TIMEOUT": "300",
"DEFAULT_TIMEOUT": "60",
"MAX_OUTPUT_SIZE": "1048576",
"ENABLE_HTTP": "true",
"ENABLE_HTTPS": "false",
"SSL_CERT": "null",
"SSL_KEY": "null",
"LOG_LEVEL": "INFO",
"ENABLE_CORS": "true",
"WORKING_DIRECTORY": "/tmp/kali-mcp",
"ENABLE_SANDBOX": "true",
"EXTRA_TOOLS": "null"
}
}
}
}You can run Kali MCP Server to securely expose Kali Linux security tools to Large Language Models via a controlled MCP and HTTP API. It performs tool discovery, sandboxed execution, and thorough input validation so you can orchestrate powerful security workflows with confidence.
You interact with the server through an MCP client to list tools, inspect tool details, and execute tools with arguments. The server enforces a whitelist, sandboxing, and resource limits to keep executions isolated and auditable. Use the HTTP API for remote integrations or run the server locally for development and testing. Start by verifying health, then discover available tools, and finally execute a chosen tool with the desired arguments and a defined timeout.
Prerequisites you need before installation are Docker and Docker Compose for containerized runs, and Python 3.8+ if you plan to develop locally. You should also have Git installed to obtain the server source.
# Quick Start with Docker
# 1. Clone the repository
git clone https://github.com/your-org/kali-mcp-server.git
cd kali-mcp-server
# 2. Build and run with Docker Compose
docker-compose up -d
# 3. Verify the installation
curl http://localhost:5000/health
```} ,{If you prefer a manual Docker build, you can build the image and run the container with the following commands. This sets timeouts and exposes the API endpoints so you can integrate with your tooling.
# Manual Docker Build
# 1. Build the Docker image
docker build -t kali-mcp-server .
# 2. Run the container
docker run -d \
--name kali-mcp-server \
-p 5000:5000 \
-p 8000:8000 \
-e MAX_TIMEOUT=300 \
-e DEFAULT_TIMEOUT=60 \
kali-mcp-server
```} ,{For local development, you can set up dependencies and run the server directly in Python. This is useful when you want to modify the server or run quick tests without Docker.
# Local Development
# 1. Install dependencies
pip install -r requirements.txt
# 2. Run the server
python server.py
```}]} ,{Configuration and security are essential for safe operation. You can tune timeouts, output limits, and sandboxing behavior via environment variables. The server is designed to validate inputs, sandbox tool executions, and log security events for auditing. If you plan to deploy in production, enable HTTPS with certificates and consider placing the server behind a reverse proxy for management and monitoring.
Security considerations include input validation, sandboxed tool execution, strict resource limits, and comprehensive audit logging. Do not expose the server to untrusted networks without proper authentication and authorization.
Network mapper that discovers hosts and services on a computer network.
Directory/file brute-forcer for web content discovery.
Web content scanner for identifying directories and files.
Web application fuzzer for discovering vulnerabilities.
Web vulnerability scanner for identifying security issues.
Network login cracker for password brute-force testing.
Password cracker for offline and online password recovery.
Advanced password recovery tool with GPU acceleration.
Parallel login brute-forcer for multiple protocols.
Network authentication tool for brute-force testing.
SQL injection tool for testing database vulnerabilities.
Wordlist generator for customized password guessing.
Wireless security suite for testing Wi-Fi networks.
Penetration testing framework with exploitation modules.
SMB enumeration tool to enumerate Windows networks.
SMB client for accessing Windows shares.
RPC client for interacting with remote services.
LDAP search utility for querying directory services.
DNS lookup utility for querying DNS records.
DNS lookup utility for querying DNS records.
WHOIS lookup utility for domain information.
Network path tracing utility.
Network connectivity test utility.
Network statistics utility.
Socket statistics utility for monitoring connections.