# Kali Linux MCP Server MCP server

Agent View of the PolicyLayer registry record for Kali Linux MCP Server: identity, probed posture, risk grade, and all 14 tools classified. HTML page: https://policylayer.com/tools/alessandroannini-kali-mcp-server

## Facts

- Server id: `alessandroannini/kali-mcp-server`
- Homepage: https://github.com/AlessandroAnnini/kali-mcp-server
- Registry record: grade D, identity unverified
- Lifecycle: active
- Rate-limited: no
- Tools: 14
- Tool categories present: Read, Write
- Tags: alessandroannini kali mcp server
- Record last modified: 2026-06-30T13:23:06.495Z

## Tools (14)

| Tool | Category | Risk | Record |
| --- | --- | --- | --- |
| `dirb_scan` | Execute | High | https://policylayer.com/tools/alessandroannini-kali-mcp-server/dirb-scan.md |
| `jwt_security_test` | Execute | High | https://policylayer.com/tools/alessandroannini-kali-mcp-server/jwt-security-test.md |
| `nikto_scan` | Execute | High | https://policylayer.com/tools/alessandroannini-kali-mcp-server/nikto-scan.md |
| `nmap_scan` | Execute | High | https://policylayer.com/tools/alessandroannini-kali-mcp-server/nmap-scan.md |
| `nuclei_scan` | Execute | High | https://policylayer.com/tools/alessandroannini-kali-mcp-server/nuclei-scan.md |
| `retirejs_scan` | Execute | High | https://policylayer.com/tools/alessandroannini-kali-mcp-server/retirejs-scan.md |
| `sqlmap_scan` | Execute | High | https://policylayer.com/tools/alessandroannini-kali-mcp-server/sqlmap-scan.md |
| `testssl_scan` | Execute | High | https://policylayer.com/tools/alessandroannini-kali-mcp-server/testssl-scan.md |
| `vpn_connect` | Execute | High | https://policylayer.com/tools/alessandroannini-kali-mcp-server/vpn-connect.md |
| `vpn_disconnect` | Execute | High | https://policylayer.com/tools/alessandroannini-kali-mcp-server/vpn-disconnect.md |
| `zap_scan` | Execute | High | https://policylayer.com/tools/alessandroannini-kali-mcp-server/zap-scan.md |
| `jwt_decode` | Read | Low | https://policylayer.com/tools/alessandroannini-kali-mcp-server/jwt-decode.md |
| `security_headers_check` | Read | Low | https://policylayer.com/tools/alessandroannini-kali-mcp-server/security-headers-check.md |
| `vpn_status` | Read | Low | https://policylayer.com/tools/alessandroannini-kali-mcp-server/vpn-status.md |

## Tool descriptions

- `dirb_scan` — Brute-force discover hidden directories and files on web servers with DIRB
- `jwt_security_test` — Test JWT token for security vulnerabilities (none algorithm, weak secrets)
- `nikto_scan` — Scan web servers for vulnerabilities and misconfigurations with Nikto
- `nmap_scan` — Perform network scanning with Nmap to discover hosts, ports, and services
- `nuclei_scan` — Fast vulnerability scanner using community templates with Nuclei
- `retirejs_scan` — Scan for vulnerable JavaScript libraries with retire.js
- `sqlmap_scan` — Test for SQL injection vulnerabilities with SQLMap
- `testssl_scan` — Test SSL/TLS configuration and vulnerabilities with testssl.sh
- `vpn_connect` — Connect to Mullvad VPN for anonymous security testing
- `vpn_disconnect` — Disconnect from Mullvad VPN
- `zap_scan` — Comprehensive web application security scanner using OWASP ZAP
- `jwt_decode` — Decode and analyze JWT tokens, optionally verifying signatures
- `security_headers_check` — Check HTTP security headers configuration for best practices
- `vpn_status` — Check current VPN connection status and server information

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=alessandroannini-kali-mcp-server · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/alessandroannini-kali-mcp-server