// SCAN REPORT

K-MCP: Kali Model Context Protocol Server

18 tools. 15 can modify or destroy data without limits.

15 write tools that can modify data. Rate limits recommended.

Last updated: 1 Jul 2026

15 can modify or destroy data

3 read-only

18 tools total

Community server · catalogue entry verified 01/07/2026

How to control K-MCP: Kali Model Context Protocol Server ↓

TOOL MAP

What K-MCP: Kali Model Context Protocol Server exposes to your agents

Read (3) Write / Execute (15) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous K-MCP: Kali Model Context Protocol Server tools

Execute · Critical execute_command execute_command on a Kali Linux terminal server can run any shell command with blast radius dependent on terminal permissions and Kali system access. Execute · Critical metasploit_run While technically capable of read-only reconnaissance modules, Metasploit is primarily an exploitation framework where most practical usage involves executing code that compromises target systems. Execute · Critical start_interactive This tool allows starting interactive shell sessions on a Kali Linux system, which is fundamentally an Execute operation. Execute · Critical evil_winrm_connect Evil-WinRM is a penetration testing tool that connects to Windows Remote Management (WinRM) services to provide an interactive shell.

15 of K-MCP: Kali Model Context Protocol Server's 18 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control K-MCP: Kali Model Context Protocol Server

PolicyLayer is an MCP gateway — it sits between your AI agents and K-MCP: Kali Model Context Protocol Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "interactive_close": {
    "limits": [
      {
        "counter": "interactive_close_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "interactive_read": {
    "limits": [
      {
        "counter": "interactive_read_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register K-MCP: Kali Model Context Protocol Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON K-MCP: KALI MODEL CONTEXT PROTOCOL →

Instant setup, no code required.

FULL CATALOGUE

All 18 K-MCP: Kali Model Context Protocol Server tools

EXECUTE 14 tools

Execute dirb_scan Execute Dirb web content scanner. Execute enum4linux_scan Execute Enum4linux Windows/Samba enumeration tool. Execute evil_winrm_connect evil_winrm_connect Execute execute_command execute_command Execute gobuster_scan gobuster_scan Execute hydra_attack hydra_attack Execute interactive_send Send a command to an existing interactive session. Execute john_crack john_crack Execute metasploit_run Execute a Metasploit module. Execute nikto_scan Execute Nikto web server scanner. Execute nmap_scan nmap_scan Execute sqlmap_scan Execute SQLmap SQL injection scanner. Execute start_interactive Start an interactive session for a command that requires continuous interaction. Execute wpscan_analyze Execute WPScan WordPress vulnerability scanner.

WRITE 1 tools

Write interactive_close Close an interactive session.

READ 3 tools

Read interactive_read Read output from an interactive session without sending new commands. Read list_active_sessions List all active interactive sessions. Read server_health Check the health status of the Kali API server.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about K-MCP: Kali Model Context Protocol Server

How do I prevent bulk modifications through K-MCP: Kali Model Context Protocol Server? +

The K-MCP: Kali Model Context Protocol Server server has 1 write tools including interactive_close. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach K-MCP: Kali Model Context Protocol Server.

How many tools does the K-MCP: Kali Model Context Protocol Server MCP server expose? +

18 tools across 3 categories: Execute, Read, Write. 3 are read-only. 15 can modify, create, or delete data.

How do I enforce a policy on K-MCP: Kali Model Context Protocol Server? +

Register the K-MCP: Kali Model Context Protocol Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every K-MCP: Kali Model Context Protocol Server tool call.

Deterministic rules across all 18 K-MCP: Kali Model Context Protocol Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON K-MCP: KALI MODEL CONTEXT PROTOCOL →

Instant setup, no code required.

18 K-MCP: Kali Model Context Protocol Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.