// SCAN REPORT

Kali

16 tools. 9 can modify or destroy data without limits.

9 write tools that can modify data. Rate limits recommended.

Last updated: 29 Jun 2026

9 can modify or destroy data

7 read-only

16 tools total

Community server · catalogue entry verified 29/06/2026

How to control Kali ↓

TOOL MAP

What Kali exposes to your agents

Read (7) Write / Execute (9) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Kali tools

Execute · High netcat_connect Netcat establishes active TCP/UDP connections to remote hosts, which constitutes executing an external network operation. Execute · High dns_enum DNS enumeration actively queries external DNS infrastructure to discover subdomains and records. Execute · High host_discovery This tool executes an nmap ping scan across a network range to enumerate live hosts. Execute · Critical hydra_bruteforce Hydra performs active offensive operations against external systems by attempting to gain unauthorized access via brute-force or dictionary attacks.

9 of Kali's 16 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Kali

PolicyLayer is an MCP gateway — it sits between your AI agents and Kali, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "dig_dns": {
    "limits": [
      {
        "counter": "dig_dns_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Kali — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON KALI →

Instant setup, no code required.

FULL CATALOGUE

All 16 Kali tools

EXECUTE 9 tools

Execute dns_enum Perform DNS enumeration to find subdomains and DNS records Execute host_discovery Discover live hosts on a network using nmap ping scan Execute hydra_bruteforce Use Hydra for password brute forcing (SSH, FTP, HTTP, etc.) Execute netcat_connect Connect to a host and port using netcat for banner grabbing Execute nikto_scan Run Nikto web vulnerability scanner against a target URL Execute nmap_scan Run an nmap port scan on a target IP or hostname. Can scan specific ports or ranges. Execute sqlmap_scan Use SQLMap to test for SQL injection vulnerabilities Execute ssl_scan Analyze SSL/TLS configuration of a host Execute subdomain_enum Discover subdomains using multiple methods (amass-style enumeration)

READ 7 tools

Read dig_dns Perform DNS lookup using dig command Read metasploit_exploit_info Get detailed information about a specific Metasploit module Read metasploit_search Search Metasploit database for exploits, payloads, or modules Read ping_host Ping a host to check connectivity and latency Read set_info Get information about Social Engineering Toolkit capabilities and attack vectors Read traceroute Trace the network path to a host Read whois_lookup Perform WHOIS lookup for a domain to get registration info

FAQ

Questions about Kali

Is the Kali MCP server safe to use without restrictions? +

The Kali server is primarily read-only with 7 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the Kali MCP server expose? +

16 tools across 2 categories: Read, Write. 7 are read-only. 9 can modify, create, or delete data.

How do I enforce a policy on Kali? +

Register the Kali MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Kali tool call.

Deterministic rules across all 16 Kali tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON KALI →

Instant setup, no code required.

16 Kali tools catalogued and risk-classified — across an index of 43,000+ MCP servers.