Kali MCP Toolkit
An MCP server that exposes over 500 Kali Linux security tools to AI models for automated penetration testing and security auditing. It includes modules for tool execution, interactive terminal management, and sandboxed code editing across 12 security
What is Kali MCP Toolkit?
Kali MCP Toolkit is a Model Context Protocol (MCP) server that allows AI assistants like Claude, Cursor, and VS Code to mcp server that exposes over 500 kali linux security tools to ai models for automated penetration testing and security auditing. it includes modules for tool execution, interactive terminal management...
An MCP server that exposes over 500 Kali Linux security tools to AI models for automated penetration testing and security auditing. It includes modules for tool execution, interactive terminal management, and sandboxed code editing across 12 security
This server falls under the Security category on MCPgee, the world's largest MCP server directory with 33,000+ servers.
Features
- An MCP server that exposes over 500 Kali Linux security tool
Use Cases
Maintainer
Works with
Installation
Manual Installation
npx kali-mcp-toolkitConfiguration
Configuration Details
claude_desktop_config.json
Performance
Response Metrics
Resource Usage
How to Set Up and Use Kali MCP Toolkit
Kali MCP Toolkit is a Python MCP server that exposes over 500 Kali Linux security tools to AI assistants, enabling automated penetration testing and security auditing through natural language. It provides a tool engine covering 12 security categories (reconnaissance, web penetration, exploitation, forensics, and more), an interactive PTY terminal manager, and a sandboxed code editor supporting 12 programming languages. Security professionals can use it to orchestrate complex multi-step engagements or CTF challenges from within an AI chat interface.
Prerequisites
- Kali Linux operating system (or a Linux system with Kali tools installed)
- Python 3.11 or higher
- pip and virtualenv or the automated install script
- Appropriate legal authorization before running any penetration testing tools
- An MCP client such as Claude Desktop
Clone the repository
Clone the Kali MCP Toolkit repository to your Kali Linux machine.
git clone https://github.com/trymonoly/Kali-Mcp-Toolkit.git
cd Kali-Mcp-ToolkitInstall using the automated script or manually
Use the provided install script for a fully automated setup, or create a virtual environment and install manually.
# Automated (recommended):
sudo bash scripts/install.sh
# Manual:
python3 -m venv .venv
source .venv/bin/activate
pip install -e ".[dev]"Review and adjust the security configuration
Edit config/default.yaml to set command timeouts, enable or disable high-risk tools, configure target whitelisting, and set blocked command patterns appropriate for your environment.
Start the server
Launch the server in stdio mode for local MCP client use, or in serve mode for remote multi-client access.
# Local stdio mode:
kalimcp stdio
# Remote server mode:
kalimcp serve --host 0.0.0.0 --port 8443Configure your MCP client
Add the Kali MCP Toolkit to your MCP client configuration. Set KALIMCP_AUTH__ENABLED and other security variables as needed.
Kali MCP Toolkit Examples
Client configuration
Add Kali MCP Toolkit to Claude Desktop in local stdio mode with authentication disabled for local use.
{
"mcpServers": {
"kalimcp": {
"command": "kalimcp",
"args": ["stdio"],
"env": {
"KALIMCP_AUTH__ENABLED": "false",
"KALIMCP_SECURITY__COMMAND_TIMEOUT": "60",
"KALIMCP_SECURITY__ENABLE_HIGH_RISK_TOOLS": "false"
}
}
}
}Prompts to try
Example prompts to drive penetration testing workflows through your MCP client. Only use against systems you own or have explicit authorization to test.
- "Run an nmap TCP scan on 192.168.1.1 and identify open services."
- "Perform a web application reconnaissance on http://testsite.local using nikto."
- "Start an interactive terminal session and run a password strength audit."
- "List all available tools in the exploitation category."
- "Generate a vulnerability assessment report for the completed scan results."Troubleshooting Kali MCP Toolkit
Tool execution fails with 'command not found' errors
Ensure you are running on Kali Linux with the relevant tool packages installed. For missing tools, install them with 'sudo apt install <toolname>'. Use 'kalimcp stdio' from the activated virtual environment.
High-risk tools are not accessible
Set KALIMCP_SECURITY__ENABLE_HIGH_RISK_TOOLS=true in your environment or in config/default.yaml. Note that enabling high-risk tools should only be done in controlled, authorized testing environments.
Server port conflict when running in serve mode
Change the port with 'kalimcp serve --port 9000' or set KALIMCP_SERVER__PORT to an available port number. Check for existing processes with 'ss -tlnp | grep 8443'.
Frequently Asked Questions about Kali MCP Toolkit
What is Kali MCP Toolkit?
Kali MCP Toolkit is a Model Context Protocol (MCP) server that mcp server that exposes over 500 kali linux security tools to ai models for automated penetration testing and security auditing. it includes modules for tool execution, interactive terminal management, and sandboxed code editing across 12 security It connects AI assistants to external tools and data sources through a standardized interface.
How do I install Kali MCP Toolkit?
Follow the installation instructions on the Kali MCP Toolkit GitHub repository. Clone the repo, install dependencies, and add the server config to your AI client.
Which AI clients work with Kali MCP Toolkit?
Kali MCP Toolkit works with all major MCP-compatible AI clients including Claude Desktop, Claude Code, Cursor, VS Code (GitHub Copilot), Windsurf, and Cline.
Is Kali MCP Toolkit free to use?
Yes, Kali MCP Toolkit is open source and available under the Apache 2.0 license. You can use it freely in both personal and commercial projects.
Kali MCP Toolkit Alternatives — Similar Security Servers
Looking for alternatives to Kali MCP Toolkit? Here are other popular security servers you can use with Claude, Cursor, and VS Code.
Casdoor
★ 13.6kAn open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
ghidraMCP
★ 9.0kAn Model Context Protocol server that enables LLMs to autonomously reverse engineer applications by exposing Ghidra's decompilation and analysis tools. It allows AI agents to list code structures, rename methods, and analyze binaries directly through
HexStrike AI
★ 8.9kHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly b
IDA Pro MCP
★ 8.7kEnables AI-assisted reverse engineering in IDA Pro by providing tools to analyze binaries, decompile functions, manage comments, search patterns, and interact with the IDA database through natural language.
Anthropic Cybersecurity Skills
★ 6.6k754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platform
Hooker
★ 5.1k🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL u
Browse More Security MCP Servers
Explore all security servers available in the MCPgee directory. Each server includes setup guides for Claude, Cursor, and VS Code.
Set Up Kali MCP Toolkit in Your Editor
Choose your AI client for step-by-step setup instructions.
Quick Config Preview
Add this to your claude_desktop_config.json or .cursor/mcp.json
Ready to use Kali MCP Toolkit?
Browse our complete directory of 33,000+ MCP servers, read setup guides for your editor, and start building with the Model Context Protocol.