// SCAN REPORT

Kali Linux Security Tools MCP Server

29 tools. 23 can modify or destroy data without limits.

23 write tools that can modify data. Rate limits recommended.

Last updated:

23 can modify or destroy data
6 read-only
29 tools total

Community server · catalogue entry verified 29/06/2026

How to control Kali Linux Security Tools MCP Server ↓

TOOL MAP

What Kali Linux Security Tools MCP Server exposes to your agents

Read (6) Write / Execute (23) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
High Risk

The most dangerous Kali Linux Security Tools MCP Server tools

Execute · High crunch_generate This tool executes the Crunch utility to generate wordlists, which are primarily used for brute-force and dictionary attacks. Execute · Critical masscan_scan masscan actively sends packets across networks to discover open ports, constituting an external operation with significant blast radius. Execute · Critical netcat_connect Netcat is a general-purpose networking tool capable of establishing reverse/bind shells, transferring files, and acting as a backdoor. Execute · High binwalk_analyze Binwalk both analyzes firmware/binary files AND extracts embedded files from them.

23 of Kali Linux Security Tools MCP Server's 29 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Kali Linux Security Tools MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Kali Linux Security Tools MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations
{
  "aircrack_info": {
    "limits": [
      {
        "counter": "aircrack_info_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Kali Linux Security Tools MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON KALI LINUX SECURITY TOOLS →

Instant setup, no code required.

FULL CATALOGUE

All 29 Kali Linux Security Tools MCP Server tools

EXECUTE 23 tools
Execute binwalk_analyze Analyze and extract embedded files using Binwalk. Provide file path relative to /output directory. Execute commix_scan Test for command injection vulnerabilities using Commix. WARNING: Only test authorized applications. Execute crunch_generate Generate custom wordlists using Crunch. Output limited to first 100 lines for safety. Execute dirb_scan Brute force directories and files on web servers using DIRB. WARNING: Only scan authorized web servers. Execute dnsenum_scan Enumerate DNS information using dnsenum. WARNING: Only scan authorized domains. Execute dnsrecon_scan DNS reconnaissance using dnsrecon. Types: std, axfr, bing, zonewalk. WARNING: Only scan authorized domains. Execute fierce_scan DNS reconnaissance and subdomain enumeration using Fierce. WARNING: Only scan authorized domains. Execute gobuster_scan Fast directory and DNS brute forcing using gobuster. Modes: dir, dns, vhost. WARNING: Only scan authorized tar Execute hydra_crack Brute force login credentials using Hydra. Services: ssh, ftp, http-get, http-post-form, etc. WARNING: Only te Execute john_crack Crack password hashes using John the Ripper. Provide hash file path. WARNING: Only crack authorized hashes. Execute lynis_audit Perform security audit using Lynis. Scan types: system, full. Audits local system security. Execute masscan_scan Fast TCP port scanner using masscan. Scans large networks quickly. WARNING: Only scan authorized targets. Execute netcat_connect Connect to TCP/UDP ports using netcat. WARNING: Only connect to authorized systems. Execute netdiscover_scan Discover live hosts on network using ARP. WARNING: Only scan authorized networks. Execute nikto_scan Scan web server for vulnerabilities using Nikto. WARNING: Only scan authorized web servers. Execute nmap_scan Scan network hosts and ports using nmap. Scan types: basic, fast, intense, vuln, service. WARNING: Only scan a Execute smtp_user_enum Enumerate SMTP users. Modes: VRFY, EXPN, RCPT. WARNING: Only test authorized mail servers. Execute sqlmap_scan Test for SQL injection vulnerabilities using sqlmap. WARNING: Only test authorized applications. Execute sslscan_test Test SSL/TLS configuration using sslscan. WARNING: Only test authorized servers. Execute testssl_test Comprehensive SSL/TLS testing using testssl.sh. WARNING: Only test authorized servers. Execute wafw00f_scan Detect Web Application Firewalls (WAF) using wafw00f. WARNING: Only scan authorized sites. Execute whatweb_scan Identify web technologies, CMS, frameworks using WhatWeb. Aggression levels: 1-4. WARNING: Only scan authorize Execute wpscan_scan Scan WordPress sites for vulnerabilities. Enumerate options: u (users), p (plugins), t (themes), vp (vulnerabl
READ 6 tools
Read aircrack_info Display wireless interface information using airmon-ng. WARNING: Only test authorized wireless networks. Read exiftool_analyze Extract metadata from files using ExifTool. Provide file path relative to /output directory. Read msfconsole_search Search Metasploit modules for exploits, payloads, auxiliaries. WARNING: Only use on authorized systems. Read searchsploit_search Search exploit database using searchsploit. Searches for known exploits and vulnerabilities. Read theharvester_search Gather emails, subdomains, IPs using theHarvester. Sources: google, bing, linkedin, etc. WARNING: Respect priv Read whois_lookup Perform WHOIS lookup for domain registration information.
FAQ

Questions about Kali Linux Security Tools MCP Server

Is the Kali Linux Security Tools MCP Server MCP server safe to use without restrictions? +

The Kali Linux Security Tools MCP Server server is primarily read-only with 6 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the Kali Linux Security Tools MCP Server MCP server expose? +

29 tools across 2 categories: Read, Write. 6 are read-only. 23 can modify, create, or delete data.

How do I enforce a policy on Kali Linux Security Tools MCP Server? +

Register the Kali Linux Security Tools MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Kali Linux Security Tools MCP Server tool call.

Deterministic rules across all 29 Kali Linux Security Tools MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON KALI LINUX SECURITY TOOLS →

Instant setup, no code required.

29 Kali Linux Security Tools MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.