// SCAN REPORT

Kali MCP Server

19 tools. 17 can modify or destroy data without limits.

17 write tools that can modify data. Rate limits recommended.

Last updated: 1 Jul 2026

17 can modify or destroy data

2 read-only

19 tools total

Community server · catalogue entry checked 01/07/2026

How to control Kali MCP Server ↓

TOOL MAP

What Kali MCP Server exposes to your agents

Read (2) Write / Execute (17) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Kali MCP Server tools

Execute · Critical kali_exploit_msfvenom_generate msfvenom generates weaponized executables and shellcode intended to compromise remote systems. Execute · Critical kali_network_masscan_scan Masscan performs active network scanning against external hosts, executing network probes at massive scale. Execute · High kali_network_nmap_scan This tool executes active network reconnaissance operations against target systems. Execute · High kali_network_tcpdump_capture This tool actively captures live network traffic, which is an external operation with significant security implications.

17 of Kali MCP Server's 19 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Kali MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Kali MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "kali_exploit_searchsploit_examine": {
    "limits": [
      {
        "counter": "kali_exploit_searchsploit_examine_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Kali MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON KALI →

Instant setup, no code required.

FULL CATALOGUE

All 19 Kali MCP Server tools

EXECUTE 17 tools

Execute kali_exploit_msfvenom_generate Generate custom payloads for Metasploit Framework. Msfvenom is a payload generator and encoder combining msfp Execute kali_network_masscan_scan High-speed port scanner capable of scanning the entire internet in minutes. Use with caution and proper author Execute kali_network_netdiscover_scan ARP reconnaissance tool for discovering hosts on a local network. Supports active and passive modes. Execute kali_network_nmap_discover Discover live hosts on a network using Nmap. Supports ping, ARP, TCP, UDP, and ICMP discovery methods. Execute kali_network_nmap_scan Perform network port scanning using Nmap. Nmap (Network Mapper) is a powerful network scanner for discovering Execute kali_network_tcpdump_capture Capture network packets for analysis. Supports BPF filters and can save to PCAP files. Execute kali_network_tshark_capture Wireshark CLI for packet capture and analysis with advanced filtering and multiple output formats. Execute kali_password_hashcat_crack Advanced password recovery tool using GPU acceleration. Supports 300+ hash types. Execute kali_password_hydra_brute Fast network login brute-forcer supporting many protocols. Hydra is a parallelized login cracker which suppor Execute kali_password_john_crack John the Ripper password cracker supporting many hash formats and attack modes. Execute kali_web_ffuf_fuzz Fast web fuzzer for discovering hidden files, directories, and parameters. URL must contain FUZZ keyword. Execute kali_web_gobuster_dir Enumerate directories and files on web servers using wordlists. Gobuster is a fast directory/file brute-forci Execute kali_web_gobuster_dns Enumerate subdomains using DNS brute-forcing with wordlists. Execute kali_web_nikto_scan Comprehensive web server scanner for vulnerabilities, misconfigurations, and security issues. Execute kali_web_nuclei_scan Template-based vulnerability scanner with extensive CVE coverage and custom templates support. Execute kali_web_sqlmap_test Automated SQL injection testing and exploitation. SQLMap automates the detection and exploitation of SQL inje Execute kali_web_wpscan_scan WordPress security scanner for finding vulnerabilities in WordPress sites, themes, and plugins.

READ 2 tools

Read kali_exploit_searchsploit_examine Examine and display the contents of an exploit from searchsploit results. Read kali_exploit_searchsploit_search Search the Exploit Database for public exploits and vulnerability information. SearchSploit is a command-line

FAQ

Questions about Kali MCP Server

Is the Kali MCP Server MCP server safe to use without restrictions? +

The Kali MCP Server server is primarily read-only with 2 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the Kali MCP Server MCP server expose? +

19 tools across 2 categories: Read, Write. 2 are read-only. 17 can modify, create, or delete data.

How do I enforce a policy on Kali MCP Server? +

Register the Kali MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Kali MCP Server tool call.

Deterministic rules across all 19 Kali MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON KALI →

Instant setup, no code required.

19 Kali MCP Server tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Kali MCP Server's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →