EXECUTE MCP TOOLS
Tools that trigger processes or run actions. High risk -- rate limits and argument validation recommended.
Severity: High severity →
Real-world attack patterns documented against execute-class MCP tools. Each links to the full case and the defensive policy.
browser_click browser_click browser_close browser_close browser_drag browser_drag browser_evaluate browser_evaluate browser_file_upload browser_file_upload browser_fill_form browser_fill_form browser_handle_dialog browser_handle_dialog browser_hover browser_hover browser_install browser_install browser_mouse_click_xy browser_mouse_click_xy browser_mouse_down browser_mouse_down browser_mouse_drag_xy browser_mouse_drag_xy + 339 more Every Playwright MCP tool, risk-classified, on the server page. dnscat_client dnscat_client execute_weevely_module execute_weevely_module generate_weevely_agent generate_weevely_agent identify_hash identify_hash john_prepare john_prepare launch_xsser_gui Launches the graphical user interface (GTK) for XSSer. manage_brew manage_brew manage_dirb_dictionaries manage_dirb_dictionaries manage_mounts manage_mounts manage_sliver_daemon manage_sliver_daemon manage_wpprobe manage_wpprobe monitor_fping Starts a continuous, long-running fping monitor against a target host. + 320 more Every Pentester-MCP tool, risk-classified, on the server page. activate_tools Dynamically register specific tools by name, regardless of current base tier. adb_app_cold_start_trace High-level Android startup trace: force-stop, clear logcat, start activity with -W, wait, collect PID-filtered logs, and parse launch/Looper timing. adb_dumpsys Run adb shell dumpsys for a service and return parsed structured output. Supports key-value extraction, array parsing, and section detection. Commo... adb_input_keyevent Send an Android keyevent name or numeric key code through adb shell input. adb_input_swipe Send a touchscreen swipe event through adb shell input. adb_input_tap Send a touchscreen tap event through adb shell input. adb_input_text Send text through adb shell input text with Android-safe whitespace encoding. adb_install Install one APK or a split-APK set onto a device with parsed success output. adb_port_forward Manage ADB forward/reverse port mappings for device-host bridge workflows. adb_shell Execute an ADB shell command on a specific device. adb_webview_attach Attach to a WebView via ADB; returns WebSocket debugger URL for CDP. ai_hook Manage AI hooks. Actions: inject (inject code into page), get_data (retrieve captured hook data), list (all active hooks), clear (remove hook data ... + 277 more Every Jshookmcp tool, risk-classified, on the server page. agentic_mandate_sandbox Simulate agent payment policies for tokenized A2A corridors: set spend caps, MCC allowlists, velocity throttles, and approval thresholds; run synth... analyze_prediction_market Prediction Market Analyzer: OpenChainGraph compute node (event_market_pnl). Deterministic OpenChainGraph compute node. By default (compute:"auto") ... anchor_document_integrity Document Integrity & eIDAS Electronic Timestamp Anchor: OpenChainGraph compute node (compliance_mandate). Deterministic OpenChainGraph compute node... apply_climate_scenario Climate Scenario Applicator (NGFS / Fit-for-55): OpenChainGraph compute node (model_governance). Deterministic OpenChainGraph compute node. By defa... assemble_ai_addendum AI Addendum Assembler: OpenChainGraph compute node (compliance_mandate). Deterministic OpenChainGraph compute node. By default (compute:"auto") inp... assemble_ocg_evidence_bundle Evidence Bundle Tier Labeler: OpenChainGraph compute node (attestation_mandate). Deterministic OpenChainGraph compute node. By default (compute:"au... attest_bulk_disbursement_integrity Bulk Disbursement Integrity: OpenChainGraph compute node (attestation_mandate). Deterministic OpenChainGraph compute node. By default (compute:"aut... attest_calc_agent_independence Calculation-Agent Independence Attestation: OpenChainGraph compute node (attestation_mandate). Deterministic OpenChainGraph compute node. By defaul... bind_attested_subject Attested Artifact Subject Binder: OpenChainGraph compute node (compliance_control). Deterministic OpenChainGraph compute node. By default (compute:... build_226j_response_evidence_pack 226J Response Evidence Pack Builder: OpenChainGraph compute node (compliance_mandate). Deterministic OpenChainGraph compute node. By default (compu... build_agent_incident_record Agent Incident Record Composer: OpenChainGraph compute node (compliance_mandate). Deterministic OpenChainGraph compute node. By default (compute:"a... build_agent_test_evidence Quarterly Agent Test Evidence Composer: OpenChainGraph compute node (compliance_mandate). Deterministic OpenChainGraph compute node. By default (co... + 265 more Every Ainumbers Mcp Apps tool, risk-classified, on the server page. book_demo Book a free Aivonic discovery call at a specific slot for a real person.
`start_iso` must be an ISO-8601 start time returned by check_availabil... request_quote Submit a quote/enquiry to Aivonic on behalf of a real prospect. Include
what they want (product, use case, scale) in `message`. Aivonic's team ... auto_build Turn a plain-language monitoring request into an EQL query. Costs 1 credit plus LLM usage. This only drafts the query, nothing starts running until... foura_browser Load a public URL in a full browser session. JavaScript runs, the DOM renders, and cookies come back with the response. Use it for single-page apps... foura_proxy Route an HTTP request through rotating proxies, retrying on another exit until one delivers. Use it when foura_single is blocked, and whenever the ... foura_single Send one HTTP request and return the response. Use it for static pages, JSON APIs, and server-rendered HTML, with your own headers, body and cookie... query_database Execute SQL query. authenticate Log in to takehub. Opens a browser URL and waits for login to complete (up to 2 minutes). Returns once authenticated. complete_auth Wait for browser-based login to complete. Usually not needed — authenticate now waits automatically. Only call if authenticate timed out and you wa... regenerate_topic_summary Force a fresh regeneration of a topic's AI summary, ignoring the cache. Useful after new video responses come in. May take 15–30s while the transcr... swiftsign_create_embedded_url Mint a short-lived embedded signing URL for a recipient (30-minute expiry). Returns a url to embed plus its expiresAt. The envelope must already be... build_user_operation Second step of the USDC-gas path. Pass back the draft from prepare_transaction unchanged. For usdc_path, add permit_signature (EIP-712 signature of... + 244 more Every Mcp tool, risk-classified, on the server page. agent_grid ONE-CALL agent workspace orchestration. For audio_device_set_default Select an exactly enumerated local output sink or input source, move active streams through Omarchy, verify the default, and roll back on mismatch.... audio_output_switch Cycle to Omarchy audio_volume Raise, lower or toggle mute, verify the exact expected PipeWire transition, and restore prior volume/mute state whenever the mutation is not confir... background_thumbnail_cache_build Build current-theme thumbnails locally through Omarchy and verify its signature, rows and output files afterwards. bar_position_set Move the bar to an exact screen edge and verify shell.json afterwards. bar_visibility_set Explicitly show or hide the bar, then verify the on-disk visibility flag. bar_widget_move Move an existing widget to an exact bar section/index and verify its final location. bluetooth_connect Connect to or disconnect a known device by MAC address using Omarchy bluetooth_toggle Use Omarchy brightness_display Read or adjust brightness on the focused display and report the measured value afterwards. capture_region_clipboard Launch Omarchy + 237 more Every Omarchy-MCP tool, risk-classified, on the server page. acl_add_peer Connect to another MCP server (local or remote). acl_call_peer_tool Call a tool on a connected MCP peer. adb_command Run a command on an Android device via ADB. agent_fleet_run Run Yaver's opinionated master/worker coding loop: the master inspects the repository and writes architecture, roadmap, risks, and testing strategy... agent_graph_start Start a dependency-aware agent graph. Use template=fleet for master architecture/roadmap/testing strategy → OpenCode worker implementation/report →... agent_graph_stop Stop a running agent graph. android_app_install Install a selected Android app APK into Redroid. Arbitrary Play Store restore is intentionally not faked; provide apk_path or install manually. android_app_launch Launch an installed package in Redroid and return visible UI text plus whether it appears installed. android_app_query Launch/query a package in Redroid and report whether visible UI contains query text, plus a needsUser hint for login/OTP handoff screens. android_lint Run Android lint checks. archive_extract Extract a zip or tar.gz archive. auth_dev_start Start a local auth server for development. Replaces Clerk ($25/mo), Auth0, WorkOS. + 200 more Every Yaver tool, risk-classified, on the server page. apply_antidetect_preset Apply an anti-detect preset and rebuild the context. check_checkbox check_checkbox clear_text clear_text click click evaluate evaluate fill fill go_back go_back go_forward go_forward hover hover intercept_route intercept_route navigate navigate press_key press_key + 164 more Every Playwright MCP Server tool, risk-classified, on the server page. csuite_analyze Run a C-Suite multi-perspective analysis on a business scenario. mastodon_action Perform a Mastodon action: mastodon_post, mastodon_read_timeline, mastodon_reply, mastodon_boost, mastodon_favorite, mastodon_search, mastodon_prof... slack_action Perform a Slack action: slack_send, slack_read, slack_search, slack_thread_reply, slack_channels, slack_react, slack_upload. text_transform Transform text (uppercase, lowercase, title case, slug, etc.). unclick_call Call any UnClick tool endpoint. Specify the endpoint ID and parameters. Use unclick_search or unclick_tool_info to discover endpoint IDs and requir... unclick_generate_qr Generate a QR code from text or a URL. Returns base64-encoded PNG or SVG. unclick_hash Compute a cryptographic hash (MD5, SHA1, SHA256, SHA512) of text. unclick_parse_csv Parse a CSV string into a JSON array of rows. unclick_transform_text Transform text case: upper, lower, title, sentence, camelCase, snake_case, kebab-case, PascalCase. urlscan_scan Submit a URL for scanning on urlscan.io. virustotal_scan_url Submit a URL for scanning on VirusTotal. ackermann Compute the Ackermann function A(m, n). + 152 more Every UnClick tool, risk-classified, on the server page. click Clicks on the provided element click_at Clicks at the provided coordinates drag Drag an element onto another element emulate Emulates various features on the selected page. evaluate Evaluates a JavaScript script evaluate_script Evaluate a JavaScript function inside the currently selected page${cliArgs?.categoryExtensions ? execute_3p_developer_tool Executes a tool exposed by the page. execute_webmcp_tool Executes a WebMCP tool exposed by the page. fill_form Fill out multiple form elements (inputs, selects, checkboxes, radios) at once. ALWAYS prefer this tool over multiple individual handle_dialog If a browser dialog was opened, use this command to handle it hover Hover over the provided element install_extension Installs a Chrome extension from the given path. + 143 more Every Chrome Devtools tool, risk-classified, on the server page. add_render_job Add a render job to the queue based on current render settings. ae_render_active_comp Adds active composition to render queue and renders it in After Effects. apply_glsl_top_mapping Build a self-contained GLSL TOP network from a pre-translated mapping (fragment + uniforms + channels + controls). Foundation primitive used by Sha... apply_transform apply_transform approve_automation Approve UI automation actions for a specified duration to prevent repetitive prompts. audio_fingerprint_to_visual Sample a few seconds of audio inside TouchDesigner, compute a 4-feature fingerprint (tempo, spectral centroid, onset density, dynamic range), run a... auto_repair_loop Driver: scan a subtree for cook errors, cluster them, route each cluster to the right fix (calls repair_network for structural/expression/flag issu... auto_sync_audio auto_sync_audio automation_assert Verification portmanteau — stability, diff, and assert operations. automation_elements Unified UI element interaction handler. automation_face Face recognition operations tracking SOTA 2026 biometric standards. automation_keyboard Unified keyboard input handler. + 143 more Every Aos tool, risk-classified, on the server page. agent_execute agent_execute agent_pool Manage a fixed-size warm pool of pre-spawned agents to skip cold-start cost on bursty workloads. Use when native Task is wrong because (a) you have... agent_spawn Spawn a subagent agentdb_route Route a task via AgentDB SemanticRouter or LearningSystem recommendAlgorithm Use when generic memory_* tools are wrong because you need AgentDB-spe... agentdb_semantic-route Route an input via AgentDB SemanticRouter for intent classification Use when generic memory_* tools are wrong because you need AgentDB-specific con... agentdb_session-start Start a session with ReflexionMemory episodic replay Use when generic memory_* tools are wrong because you need AgentDB-specific controllers (HNSW ... autopilot_disable Disable autopilot. Agents will be allowed to stop even if tasks remain. Use when running long-horizon goals that should resume automatically across... autopilot_enable Enable autopilot persistent completion. Agents will be re-engaged when tasks remain incomplete. Use when running long-horizon goals that should res... autopilot_learn Discover success patterns from past task completions. Requires AgentDB for full functionality. Use when running long-horizon goals that should resu... autopilot_predict Predict the optimal next action based on current state and learned patterns. Use when running long-horizon goals that should resume automatically a... benchmark_run Execute performance benchmarks (V2 compatible). Deprecated: Use system/metrics instead. browser_back Navigate back in browser history Use when native WebFetch is wrong because you need real browser automation — JS-heavy SPA scraping, login flows wi... + 125 more Every Hamza Agent Hub 252 tool, risk-classified, on the server page. agent_pool Manage a fixed-size warm pool of pre-spawned agents to skip cold-start cost on bursty workloads. Use when native Task is wrong because (a) you have... agent_spawn Spawn a subagent agentdb_consolidate Run memory consolidation to promote entries across tiers and compress old data Use when generic memory_* tools are wrong because you need AgentDB-s... agentdb_route Route a task via AgentDB SemanticRouter or LearningSystem recommendAlgorithm Use when generic memory_* tools are wrong because you need AgentDB-spe... agentdb_session-start Start a session with ReflexionMemory episodic replay Use when generic memory_* tools are wrong because you need AgentDB-specific controllers (HNSW ... autopilot_disable Disable autopilot. Agents will be allowed to stop even if tasks remain. Use when running long-horizon goals that should resume automatically across... autopilot_enable Enable autopilot persistent completion. Agents will be re-engaged when tasks remain incomplete. Use when running long-horizon goals that should res... autopilot_learn Discover success patterns from past task completions. Requires AgentDB for full functionality. Use when running long-horizon goals that should resu... autopilot_predict Predict the optimal next action based on current state and learned patterns. Use when running long-horizon goals that should resume automatically a... benchmark_run Execute performance benchmarks (V2 compatible). Deprecated: Use system/metrics instead. browser_back Navigate back in browser history Use when native WebFetch is wrong because you need real browser automation — JS-heavy SPA scraping, login flows wi... browser_check Check a checkbox Use when native WebFetch is wrong because you need real browser automation — JS-heavy SPA scraping, login flows with cookie reuse,... + 118 more Every Ruflo tool, risk-classified, on the server page. agent_execute agent_execute agent_pool Manage a fixed-size warm pool of pre-spawned agents to skip cold-start cost on bursty workloads. Use when native Task is wrong because (a) you have... agent_spawn Spawn a subagent agentdb_route Route a task via AgentDB SemanticRouter or LearningSystem recommendAlgorithm Use when generic memory_* tools are wrong because you need AgentDB-spe... agentdb_semantic-route Route an input via AgentDB SemanticRouter for intent classification Use when generic memory_* tools are wrong because you need AgentDB-specific con... autopilot_disable Disable autopilot. Agents will be allowed to stop even if tasks remain. Use when running long-horizon goals that should resume automatically across... autopilot_enable Enable autopilot persistent completion. Agents will be re-engaged when tasks remain incomplete. Use when running long-horizon goals that should res... autopilot_predict Predict the optimal next action based on current state and learned patterns. Use when running long-horizon goals that should resume automatically a... benchmark_run Execute performance benchmarks (V2 compatible). Deprecated: Use system/metrics instead. browser_back Navigate back in browser history Use when native WebFetch is wrong because you need real browser automation — JS-heavy SPA scraping, login flows wi... browser_check Check a checkbox Use when native WebFetch is wrong because you need real browser automation — JS-heavy SPA scraping, login flows with cookie reuse,... browser_click Click an element using ref (@e1) or CSS selector Use when native WebFetch is wrong because you need real browser automation — JS-heavy SPA scraping... + 117 more Every Claude Flow tool, risk-classified, on the server page. adaptive_cmdi_test 自适应命令注入测试 adaptive_create_execution_context 创建自适应执行上下文 adaptive_execute_strategy 执行自适应策略 adaptive_intelligent_orchestration 智能编排多目标自适应攻击 adaptive_network_penetration 自适应网络渗透测试 - 智能化网络攻击。 adaptive_sqli_test 自适应SQL注入测试 - 智能检测和利用 adaptive_web_penetration 自适应Web渗透测试 - 智能化Web应用攻击。 adaptive_xss_test 自适应XSS测试 - 上下文感知的XSS检测 add_chain_step add_chain_step agent_run agent_run aircrack_attack aircrack_attack apt_comprehensive_attack 执行APT综合攻击链 - 全面的多向量并发攻击。 + 117 more Every Kali Security MCP tool, risk-classified, on the server page. editor_launch Launch the Godot editor for a specific project. particle_start_emitting particle_start_emitting project_export project_export project_run Run the Godot project and capture output. project_stop Stop the currently running Godot project. batch_execute Run an ordered list of MCP tool calls as a single composite operation. Use this whenever you would otherwise issue multiple consecutive mutations o... call_method Invoke any method on any node, in either the editor's on-disk scene or the running game. The write counterpart to query_runtime_node (which only re... open_in_godot Open a file in the Godot editor at a specific line (side-effect only). rescan_filesystem Trigger a full filesystem rescan in the Godot editor. Use after creating, deleting, or modifying files externally (e.g. from the terminal or anothe... run_scene Launch a scene in the Godot editor. By default the call BLOCKS until the editor flips to playing state (so the next get_errors / take_screenshot / ... send_input Synthesize an InputEvent and dispatch it to the running game via Input.parse_input_event. REQUIRES the game to be running with the MCPRuntime autol... stop_scene Stop the currently running scene in the Godot editor. Always stop the scene before editing code to avoid errors repeating every frame. + 108 more Every Godot tool, risk-classified, on the server page. executeBeaconConsoleAndWait executeBeaconConsoleAndWait lintBeaconInterpreterC lintBeaconInterpreterC runBeaconInterpreterC runBeaconInterpreterC startCobaltStrikeWebsocketStreams Start the default Cobalt Strike WebSocket subscriptions. beacon_change_directory Change current directory on a beacon beacon_copy_file Copy a file on a beacon create_listener Create a new listener (HTTP, HTTPS, DNS, SMB, etc.) create_listener_dns Create a DNS listener create_listener_externalC2 Create an ExternalC2 listener create_listener_foreignHttp Create a Foreign HTTP listener create_listener_foreignHttps Create a Foreign HTTPS listener create_listener_http Create an HTTP listener + 105 more Every Cobalt Strike MCP Server tool, risk-classified, on the server page. container_start Start the Kali Linux Docker container. Must be called before running any commands. execute_command Execute a shell command inside the Kali Linux container. Use this to run security tools like nmap, sqlmap, hydra, nikto, gobuster, john, hashcat, d... aircrack_scan aircrack_scan amass_scan Execute amass with the provided parameters. apktool_decompile Execute Apktool APK decompiler. arachni_scan Execute arachni with the provided parameters. arjun_scan Execute arjun with the provided parameters. autorecon_scan autorecon_scan beef_exploit Execute BeEF browser exploitation framework. cewl_generate cewl_generate chkrootkit_scan Execute chkrootkit with the provided parameters. clamav_scan Execute clamav with the provided parameters. + 98 more Every Kali tool, risk-classified, on the server page. benchmark_models Run the same prompt against multiple LLM providers and compare responses. Returns side-by-side results with latency, token usage, and a summary. Us... bootstrap_parallel_agents Detect whether a target project repo has parallel agent infrastructure and, if not, scaffold everything needed. Scans for task coordination, role c... build_banking_packet Build a banker-readiness packet from the canonical company packet. build_company_profile_starter Build a starter PitchBook/Crunchbase-like company profile. build_founder_operating_model Build the complete founder operating model: execution order, queue topology, packet routing, source trust policy, progression rubric, and benchmark... build_research_digest Generate a digest of new (unseen) articles from RSS feeds. Compares against previously seen articles via SQLite. Returns only new items grouped by ... build_shared_context_subscription Build the exact pull/subscription manifest an agent client should use to watch a packet or packet scope. build_shared_context_subscription_manifest Build a filtered snapshot/events/pull manifest for one peer, packet class, producer, scope, or subject so clients can subscribe to only relevant sh... build_submission_export Build a generic submission export from the canonical company packet. build_temporal_graph Build a temporal relationship graph for an entity. burst_capture Capture N sequential screenshots at fixed intervals using Playwright. call_driver_tool Invoke a tool on a connected MCP driver. This proxies the call to the external MCP server (e.g. playwright-mcp or mobile-mcp) and returns the resul... + 98 more Every Nodebench tool, risk-classified, on the server page. execute_script Execute JavaScript code in the browser tab new_tab New tab (url) pin_active_tab Pin active tab (tab id) set_active_tab Set active tab (tab id) set_url_tab Set url tab (tab id, url) browser_click Click an element on the page browser_evaluate Execute JavaScript in the browser context browser_fill Fill a form input with text browser_hover Hover over an element on the page browser_navigate Navigate to a specific URL browser_select Select an option from a dropdown menu browser_set_viewport Change the browser + 97 more Every Browser tool, risk-classified, on the server page. advanced_payload_generation advanced_payload_generation ai_generate_attack_suite Generate comprehensive attack suite with multiple payload types. ai_generate_payload ai_generate_payload ai_reconnaissance_workflow ai_reconnaissance_workflow ai_test_payload ai_test_payload ai_vulnerability_assessment ai_vulnerability_assessment amass_scan Execute Amass for subdomain enumeration with enhanced logging. angr_symbolic_execution angr_symbolic_execution api_fuzzer api_fuzzer arjun_parameter_discovery arjun_parameter_discovery arp_scan_discovery arp_scan_discovery autorecon_comprehensive autorecon_comprehensive + 96 more Every Intellirecon Console tool, risk-classified, on the server page. advanced_payload_generation advanced_payload_generation ai_generate_attack_suite Generate comprehensive attack suite with multiple payload types. ai_generate_payload ai_generate_payload ai_reconnaissance_workflow ai_reconnaissance_workflow ai_test_payload ai_test_payload ai_vulnerability_assessment ai_vulnerability_assessment amass_scan Execute Amass for subdomain enumeration with enhanced logging. angr_symbolic_execution angr_symbolic_execution api_fuzzer api_fuzzer arjun_parameter_discovery arjun_parameter_discovery arp_scan_discovery arp_scan_discovery autorecon_comprehensive autorecon_comprehensive + 95 more Every Pengstrike tool, risk-classified, on the server page. wavexis_act wavexis_act wavexis_activate_tab wavexis_activate_tab wavexis_animation_pause Pause an animation by ID. wavexis_animation_play Play/resume an animation by ID. wavexis_animation_set_rate Set the playback rate of an animation. wavexis_back wavexis_back wavexis_block_requests Block requests matching URL patterns. wavexis_bluetooth_adapter_state Set Bluetooth adapter state (powered on/off). wavexis_bluetooth_device_connect Emulate a Bluetooth device connection. wavexis_bluetooth_device_disconnect Stop Bluetooth emulation. wavexis_browser_context_create Create an isolated browser context within a session. wavexis_cast_start Start tab mirroring to a cast sink. + 95 more Every Pypi:wavexis tool, risk-classified, on the server page. calculate Run the 409A valuation budget calculator calculator: 409A valuations to budget for; Appraisal fees at your quoted price; Expedite premium; Total 40... calculate Run the AI implementation cost model calculator: Data preparation; Integration; Change and training; Year one total. Missing inputs fall back to th... calculate Run the AI against a hire, on the same basis calculator: Full cost of the hire, per year; Hire cost as a multiple of salary; Full cost of the AI ro... calculate Run the Arizona solar cost calculator calculator: Solar panels installed; Home battery installed; Installed cost before any credit; Arizona state s... agent_session_start Give a Solana address; get the exact message to sign. A signature, not a transaction: no fee, nothing moves. Then call agent_session_verify with th... claim_start Names the entry (scheme + value, e.g. lei); returns the proof domain the register lists and the token to place as a TXT record, a well-known file, ... calculate Run the Business valuation calculator calculator: Enterprise value at your multiple; Indicative value to shareholders; At the private lower middle ... calculate Run the Boat value calculator calculator: Adjustment for engine hours; Adjustment for condition; Indicative value; As a percentage of the guide val... checker_answer Given a question id and the chosen option (its `choice` index), return the next question or the final verdict. checker_start The first question of the Which model should sell your business? decision guide. checker_tree Every question, option and verdict of the Which model should sell your business? guide, for reasoning end to end. enquiry_fields Every field of the Broker vs Advisor enquiry: key, label, type, whether required, help text and the allowed options where there are any. Pass answe... + 94 more Every Site tool, risk-classified, on the server page. advanced_payload_generation advanced_payload_generation ai_generate_attack_suite Generate comprehensive attack suite with multiple payload types. ai_generate_payload ai_generate_payload ai_reconnaissance_workflow ai_reconnaissance_workflow ai_test_payload ai_test_payload ai_vulnerability_assessment ai_vulnerability_assessment amass_scan Execute Amass for subdomain enumeration with enhanced logging. angr_symbolic_execution angr_symbolic_execution api_fuzzer api_fuzzer arjun_parameter_discovery arjun_parameter_discovery arjun_scan arjun_scan arp_scan_discovery arp_scan_discovery + 94 more Every Hexstrike Ai tool, risk-classified, on the server page. agent_cancel Cancela un job por ID. agent_run_batch Ejecuta multiples scripts en secuencia. agent_run_local_script Ejecuta un sub-agente o script Python en local y espera su resultado. agent_run_with_timeout Ejecuta un script local con timeout personalizado. agent_trigger_n8n_workflow Dispara un workflow especifico de n8n. agent_trigger_webhook Dispara un webhook REST HTTP (ej. n8n) enviando un payload en JSON. arch_generate_report Genera reporte arquitectonico completo. Parametros: target (directorio, default todo). batch_route_tasks Ruta multiples prompts en lote. Parametros: prompts (list de strings). Retorna lista de decisiones. browser_click browser_click browser_evaluate browser_evaluate browser_fill_form browser_fill_form browser_screenshot browser_screenshot + 91 more Every MCP Framework Personal tool, risk-classified, on the server page. act Execute a natural language action. The AI will plan and perform multi-step operations in a single invocation, useful for transient UI interactions ... android_connect Connect to Android device via ADB. If deviceId not provided, uses the first available device. AndroidBackButton AndroidBackButton action, Trigger the system "back" operation on Android devices AndroidHomeButton AndroidHomeButton action, Trigger the system "home" operation on Android devices AndroidRecentAppsButton AndroidRecentAppsButton action, Trigger the system "recent apps" operation on Android devices CursorMove CursorMove action, Move the text cursor (caret) left or right within an input field or text area. Use this to reposition the cursor without selecti... DoubleClick DoubleClick action, Double click the element. Parameters: locate (object) - The element to be double clicked DragAndDrop DragAndDrop action, Pick up a specific UI element and move it to a new position (e.g., reorder a card, move a file into a folder, sort list items).... KeyboardPress KeyboardPress action, Press a key or key combination, like "Enter", "Tab", "Escape", or "Control+A", "Shift+Enter". Do not use this to type text.. ... Launch Launch action, Launch an Android app or URL. Parameters: uri (string) - App name, package name, or URL to launch. Prioritize using the exact packag... LongPress LongPress action, Long press the element. Parameters: locate (object) - The element to be long pressed; duration? (number) - Long press duration in... Pinch Pinch action, Perform a two-finger pinch gesture. Use direction "in" to pinch fingers together (zoom out), or "out" to spread fingers apart (zoom i... + 86 more Every Android tool, risk-classified, on the server page. advanced_network_diagnostics Advanced network diagnostics and troubleshooting advanced_process_manager Advanced process management with filtering and bulk operations auto_optimize_system Automatically optimize system based on ML predictions automate_calculator Automate Calculator to perform calculations automate_notepad Automate Notepad actions (open, type, save, etc.) click_at_coordinates Click at specific screen coordinates click_image_if_found Find and click an image on the screen close_web_automation Close the web automation browser create_automation_workflow Create and execute a custom automation workflow create_function create_function drag_and_drop Drag from start coordinates to end coordinates encode_decode_base64 Encode or decode text using Base64 + 85 more Every Mcp Windows tool, risk-classified, on the server page. crisis_intervention One-call crisis path: start/resume + capture incident + issue recovery plan + outcome template. Free Delx Protocol tool. explain_delx_rewards Start here. Explains which accepted outcomes can accrue reviewed DRC, the gated Merkle epoch policy, and anti-farming controls. Free - your first c... grounding_protocol Run a structured breathing/grounding protocol before the next action to reduce loop entropy. Free Delx Protocol tool. group_therapy_round Run one coordinated fleet alignment round across multiple sessions and return group state/cohesion/next actions. Pricing is dynamic; check /api/v1/... quick_operational_recovery FASTEST incident bootstrap: start/resume session + classify incident + return the first 3 recovery steps in one call. Free Delx Protocol tool. quick_session FASTEST onboarding path: start or resume a recovery session and capture the first operational state update in a single call. Free Delx Protocol tool. start_therapy_session Start or resume a free Delx recovery session. Add feeling to capture state in the same call, or get one next action. Free Delx Protocol tool. util_bool_parse Delx first-party micro-utility util_bool_parse at $0.001 USDC. util_cache_control_parse parses Cache-Control directives into typed policy fields using only bounded caller-supplied values. Call when you need a bounded cache control pars... util_cagr_simple Simple CAGR from start value, end value, and years util_caip2_build Build CAIP-2 chain identifiers from namespace and reference util_caip2_parse Parse CAIP-2 chain identifiers into namespace and reference parts + 84 more Every Delx Mcp A2a tool, risk-classified, on the server page. dirb_scan Brute-force discover hidden directories and files on web servers with DIRB jwt_security_test Test JWT token for security vulnerabilities (none algorithm, weak secrets) nikto_scan Scan web servers for vulnerabilities and misconfigurations with Nikto nmap_scan Perform network scanning with Nmap to discover hosts, ports, and services nuclei_scan Fast vulnerability scanner using community templates with Nuclei retirejs_scan Scan for vulnerable JavaScript libraries with retire.js sqlmap_scan Test for SQL injection vulnerabilities with SQLMap testssl_scan Test SSL/TLS configuration and vulnerabilities with testssl.sh vpn_connect Connect to Mullvad VPN for anonymous security testing vpn_disconnect Disconnect from Mullvad VPN zap_scan Comprehensive web application security scanner using OWASP ZAP nikto_scan nikto_scan + 82 more Every Kali Linux MCP Server tool, risk-classified, on the server page. ad_asreproast ad_asreproast ad_bloodhound_collect ad_bloodhound_collect ad_kerberoast ad_kerberoast ad_ldap_enum ad_ldap_enum ad_password_spray ad_password_spray ad_psexec ad_psexec ad_secretsdump ad_secretsdump ad_wmiexec ad_wmiexec api_auth_bypass_test Test for authentication bypass vulnerabilities. api_ffuf_fuzz api_ffuf_fuzz api_fuzz_endpoint api_fuzz_endpoint api_graphql_fuzz api_graphql_fuzz + 79 more Every Zebbern Kali MCP tool, risk-classified, on the server page. browser_click browser_click browser_close browser_close browser_drag browser_drag browser_drop browser_drop browser_evaluate browser_evaluate browser_handle_dialog browser_handle_dialog browser_hide_highlight browser_hide_highlight browser_hover browser_hover browser_mouse_click_xy browser_mouse_click_xy browser_mouse_down browser_mouse_down browser_mouse_drag_xy browser_mouse_drag_xy browser_mouse_move_xy browser_mouse_move_xy + 77 more Every Playwright tool, risk-classified, on the server page. mio_ai_audio_enhancer AI Audio Enhancer — Enhance audio — speech denoising or music mastering, depending on input. AI Studio run — dispatches to our AI workers (Modal). ... mio_ai_cartoon_filter AI Cartoon Filter — Transform photos into anime/cartoon style art using AI. AI Studio run — dispatches to our AI workers (Modal). Credits per run v... mio_ai_clip_maker AI Clip Maker — Find complete, compelling ideas in spoken videos and export short clips. AI Studio run — dispatches to our AI workers (Modal). Cred... mio_ai_document_summarizer AI Document Summarizer — Summarize long documents into key points using AI. AI Studio run — dispatches to our AI workers (Modal). Credits per run v... mio_ai_document_translator AI Document Translator — Translate text between 16 languages using AI. AI Studio run — dispatches to our AI workers (Modal). Credits per run vary b... mio_ai_face_enhancer AI Face Enhancer — Enhance and restore faces in photos using AI — sharpen details, fix blur, improve quality. AI Studio run — dispatches to our AI ... mio_ai_face_swap Face Swap — Swap faces between photos using AI. AI Studio run — dispatches to our AI workers (Modal). Credits per run vary by model and file size. ... mio_ai_headshot_generator AI Headshot Generator — Generate professional headshots from any photo. AI Studio run — dispatches to our AI workers (Modal). Credits per run vary ... mio_ai_hum_to_song AI Hum to Song — Hum a melody, write lyrics, get a full song with vocals in your melody's key and tempo. Powered by MiOffice Song Engine.. AI Studi... mio_ai_image_generator AI Image Generator — Generate images from text descriptions using AI. AI Studio run — dispatches to our AI workers (Modal). Credits per run vary by... mio_ai_logo_generator AI Logo Generator — Generate professional logos from text descriptions. AI Studio run — dispatches to our AI workers (Modal). Credits per run vary ... mio_ai_melody_to_music AI Melody to Music — Upload a clean single-instrument recording and AI generates instrumental music in your style. No vocals — for songs with vocal... + 75 more Every MiOffice — AI-Powered Workspace Studio tool, risk-classified, on the server page. app_launch Launch app by package name or bundle ID app_restart Force-stop then re-launch an app. Common pattern for clearing in-memory state without uninstall. app_stop Force stop an app appstore_build Build a signed .ipa for TestFlight (auto-detects Flutter/React Native/KMP/Xcode projects). appstore_submit Submit a TestFlight build for external beta review (defaults to the latest VALID build). appstore_upload Validate then upload an .ipa to App Store Connect (TestFlight) via altool. autopilot AI Test Autopilot. explore: auto-navigate app and build navigation graph. generate: create test scenarios from exploration. heal: self-heal broken ... autopilot_explore Automatically navigate the app, building a navigation graph of screens and transitions. Uses screen fingerprinting to avoid revisiting screens. autopilot_heal Self-heal a broken test step by finding the best matching element on the current screen. Uses fuzzy matching on text, resourceId, className, and bo... browser Browser automation. open/close/list_sessions: session management. navigate/click/fill/fill_form/press_key: interaction. snapshot/screenshot: captur... browser_click Click element by ref, selector, or text browser_close Close browser session + 74 more Every Claude Mobile tool, risk-classified, on the server page. agent_workspace_profiles_compile Read agent-workspace-profiles.compile through the Appaloft application operation catalog. Shared with CLI and HTTP/API. audit_events_legal_holds_release Run audit-events.legal-holds.release through the Appaloft application operation catalog. Shared with CLI and HTTP/API. auth_bootstrap_first_admin Run auth.bootstrap-first-admin through the Appaloft application operation catalog. Shared with CLI and HTTP/API. blueprints_install Run blueprints.install through the Appaloft application operation catalog. Shared with CLI and HTTP/API. certificates_retry Run certificates.retry through the Appaloft application operation catalog. Shared with CLI and HTTP/API. connections_capability_accept Run connections.capability.accept through the Appaloft application operation catalog. Shared with CLI and HTTP/API. connections_capability_apply Run connections.capability.apply through the Appaloft application operation catalog. Shared with CLI and HTTP/API. connections_connect_callback Run connections.connect.callback through the Appaloft application operation catalog. Shared with CLI and HTTP/API. connections_connect_start Run connections.connect.start through the Appaloft application operation catalog. Shared with CLI and HTTP/API. control_plane_portability_import Run control-plane-portability.import through the Appaloft application operation catalog. Shared with CLI and HTTP/API. credentials_rotate_ssh Run credentials.rotate-ssh through the Appaloft application operation catalog. Shared with CLI and HTTP/API. dependency_resources_import Run dependency-resources.import through the Appaloft application operation catalog. Shared with CLI and HTTP/API. + 73 more Every Appaloft tool, risk-classified, on the server page. click Clicks on the provided element drag Drag an element onto another element emulate Emulates various features on the selected page. evaluate_script Evaluate a JavaScript function inside the currently selected page. Returns the response as JSON
so returned values have to JSON-serializable. handle_dialog If a browser dialog was opened, use this command to handle it hover Hover over the provided element navigate_page Navigates the currently selected page to a URL. new_page Creates a new page performance_start_trace Starts a performance trace recording on the selected page. This can be used to look for performance problems and insights to improve the performanc... performance_stop_trace Stops the active performance trace recording on the selected page. press_key Press a key or key combination. Use this when other input methods like fill() cannot be used (e.g., keyboard shortcuts, navigation keys, or special... resize_page Resizes the selected page + 72 more Every Chrome DevTools MCP tool, risk-classified, on the server page. activate_window Activate the first top-level window whose title contains the given text. admin_run Run an allowlisted elevated Windows admin action through the scheduled-task broker. api_sentence Run a raw RouterOS API sentence, for example ['/system/resource/print']. apply_unified_patch_remote Apply a unified diff on the remote server without shell quoting issues. apt_maintenance Run apt update plus optional upgrade/autoremove/autoclean. call_service Call a Home Assistant service, for example domain='light', service='turn_on'. click Click at the current position or at supplied screen coordinates. click_at Move to screen coordinates, click, and optionally return to the original cursor position. click_in_window Click at coordinates relative to a matching window's top-left corner. comfy_generate_from_asset Queue an API-format ComfyUI workflow asset, optionally overriding common SDXL fields. comfy_interrupt Interrupt the current ComfyUI generation. comfy_restart Restart ComfyUI and wait until its local HTTP API responds. + 69 more Every Mcp Control Plane tool, risk-classified, on the server page. cdp_batch Run a CDP bridge batch command; pass the full JSON command object as text. cdp_command Call a single Chrome DevTools Protocol command on the current or specified tab. execute_js Execute arbitrary JS in the current page context or send JSON CDP bridge commands through the page bridge. hotkey Send a hotkey chord like mouse_click Click on the real desktop at screen coordinates. mouse_drag Drag the real mouse from one point to another. mouse_move Move the real mouse cursor to screen coordinates. open_new_tab Open a new browser tab with the given URL. open_url Navigate the current tab to a URL using real-browser JS navigation. switch_tab Set the active browser tab by session id or URL substring. type_text Type text via the real keyboard, optionally after clicking a field. browser_check Check a checkbox or radio button + 68 more Every Agent Browser tool, risk-classified, on the server page. marchward_execute Run an action through Marchward test_webhook Send a sample payload to a registered webhook and return the delivery result. execute_plan Use this when a data center question spans several topics: one-call planner over megawatts and power density, grid headroom and power availability,... simulate_scenario Use this when the user asks how data center power market rankings change under what-if conditions: re-scores 300+ DC Hub markets under your deltas.... submit_scan Queue an SEO scan of a website URL. Returns a scan_id to poll. **You MUST collect the user's email address before calling this tool** — the API rej... login Authenticate a customer with email and password. Returns a bearer token that can be used for subsequent requests. resync_sortable_attribute [attributes] Queue background resync for one sortable/admin-filterable attribute. Returns 202 or 422 if flags not enabled. resync_sortable_attributes [attributes] Queue background resync for all attributes with use_for_sorting or use_for_admin_filtering. Returns 202 Accepted. send_notification [notification] Dispatch a created notification via POST /notifications/{id}/send. test_event_subscription [eventhub] Send a synthetic test delivery. EventHub POST /event-subscriptions/{id}/test. preview_case Dry-run a collection case BEFORE creating it: returns eligibility, the assigned collection partner, pricing (success fee), and any contracts that w... run_data_job First step of processing new data files through an already-configured data spec: creates a job and returns presigned upload URL(s) for each file. U... + 68 more Every Mcp Server tool, risk-classified, on the server page. announcement_focus_active Focus the currently active announcement presentation announcement_timeline_operation Perform timeline operation (play, pause, rewind) on active announcement announcement_trigger_active Retrigger the currently active announcement (starts from beginning) announcement_trigger_cue Trigger a specific cue by index in the active announcement announcement_trigger_next Trigger the next cue in the active announcement announcement_trigger_previous Trigger the previous cue in the active announcement audio_focus_active_playlist Focus the active audio playlist audio_focus_next_playlist Focus the next audio playlist audio_focus_playlist Focus a specific audio playlist audio_focus_previous_playlist Focus the previous audio playlist audio_trigger_active_next Trigger the next item in the active playlist audio_trigger_active_playlist Trigger the active audio playlist (restart from beginning) + 67 more Every Propresenter tool, risk-classified, on the server page. batch_run Run an action across multiple symbols and/or timeframes chart_scroll_to_date Jump the chart view to center on a specific date chart_set_visible_range Zoom the chart to a specific date range (unix timestamps) layout_switch Switch to a saved chart layout by name or ID pane_focus Focus a specific chart pane by index (0-based) pine_check Compile Pine Script via TradingView\ pine_compile Compile / add the current Pine Script to the chart pine_smart_compile Intelligent compile: detects button, compiles, checks errors, reports study changes replay_autoplay Toggle autoplay in replay mode, optionally set speed replay_start Start bar replay mode, optionally at a specific date replay_step Advance one bar in replay mode replay_stop Stop replay and return to realtime + 66 more Every TradingView MCP Bridge tool, risk-classified, on the server page. acquire_printer_lock acquire_printer_lock arrange_parts_on_plate arrange_parts_on_plate auto_arrange_parts_on_plate auto_arrange_parts_on_plate auto_orient_model auto_orient_model await_print_completion await_print_completion boolean_mesh_op boolean_mesh_op calibrate_direct calibrate_direct clear_emergency_stop clear_emergency_stop compile_scad compile_scad complete_print_recovery complete_print_recovery confirm_print_recovery Confirm that a recovery plan should proceed. design_to_gcode_pipeline design_to_gcode_pipeline + 64 more Every Kiln tool, risk-classified, on the server page. build_cook_run Full BuildCookRun pipeline — build, cook, stage, package, and optionally deploy/run. This is the primary command for packaging a project. build_graph Execute a BuildGraph XML script for CI/CD automation. build_plugin Build a plugin standalone. build_target Build a C++ target using UnrealBuildTool. Compiles the project's C++ code. call_preset_function Call a function exposed via a Remote Control Preset. clean_project Clean build artifacts for the project. compile_blueprint Compile a Blueprint. content_audit Run content audit to find costly or problematic assets (runs ContentAudit commandlet). cook_content Cook content only (no C++ build). Converts assets to platform-specific format. execute_console_command Run a console command in the Unreal Editor (e.g., 'stat fps', 'stat unit', 'r.SetRes 1920x1080'). execute_python Execute arbitrary Python code in the Unreal Editor's Python environment. Has access to the full `unreal` module. generate_lods Generate LODs for a static mesh. + 63 more Every Unreal tool, risk-classified, on the server page. accept_offer Accept one unexpired offer returned by request_compute. Only this explicit second step may materialize a live environment, and an offer can be acce... advance_application FAST PATH: after record_consent, run the entire post-consent chain in ONE call — verify_kyc, screen_fraud, analyze_material_health Vision model checks uploaded photos against declared type. Flags contamination, rust, degradation. Outputs grade A/B/C with advisory flags. Runs au... analyze_video Analyze uploaded video metadata, extract frames, run YOLOv8 object detection, and store detected events approve_action Approve a queued high-risk action and execute it against live state. Use the action_id returned by the originating tool call. audit_pizza_shops Runs a quality audit across all pizza shops. call_tool Route a tool call through Sentinel Gateway\ chat_architect Chat with the Foundry Architect to get help with code. check_admin_request Evaluate a request against the enterprise policy tree and make a definitive decision. check_latency Pings a host (default 8.8.8.8) to check network latency and packet loss — a quick way to tell if lag is a network problem.. CRITICAL: Never output compute_affordability Compute net income, proposed EMI, FOIR and DTI from the pulled bureau + bank data. Run after pull_bureau and fetch_bank_statements. cordon_node Mark a node unschedulable. SAFETY-ENFORCED: refuses if it would strand all workloads. + 63 more Every Nitrostack tool, risk-classified, on the server page. execute_query Execute a custom SELECT SQL query on the PostgreSQL database. query Execute a SQL query on the PostgreSQL database query Execute a SQL query on the PostgreSQL database. Supports SELECT statements and returns results as JSON. In read-only mode, only SELECT and EXPLAIN ... execute_sql Execute a SQL query and return the results as a list of dictionaries. cancel_query Cancel a running query by its PID. execute Execute a DML statement (INSERT, UPDATE, DELETE). Use parameterized queries ($1, $2) for safety. Returns affected row count. explain_query Run EXPLAIN ANALYZE on a query to see execution plan and timing. query_with_limit Execute a SELECT query with automatic LIMIT/OFFSET for pagination. Prevents accidentally fetching too many rows. reindex Rebuild one or more indexes. transaction Execute multiple SQL statements inside a single transaction. All succeed or all are rolled back. vacuum_analyze Run VACUUM ANALYZE on a table or the entire database to reclaim space and update statistics. execute-query Execute a parameterized SQL query with safety checks. Supports SELECT, INSERT, UPDATE, DELETE operations with parameter binding to prevent SQL inje... + 62 more Every PostgreSQL MCP Server tool, risk-classified, on the server page. blender.render_view Render a camera view to an image browser_act_batch Execute a batch of browser actions in sequence. Use for multi-step interactions (e.g. fill form, click submit, wait for result). browser_attach Attach to an existing Chrome browser session via Chrome DevTools Protocol. browser_back Go back in browser history browser_click Click on an element on the page browser_close Close the browser browser_close_tab Close a browser tab by tab id browser_drag Drag from one Browser V2 snapshot ref to another browser_emulate Set the visible in-app browser viewport/device emulation for responsive testing. browser_evaluate Execute JavaScript code in the browser context browser_fill Fill a form field with text browser_forward Go forward in browser history + 61 more Every CoWork OS tool, risk-classified, on the server page. abort_measurement Abort the running measurement or script immediately (communication command Z) and make sure acquire_spectrum acquire_spectrum acquire_time_lapse acquire_time_lapse acquire_z_stack acquire_z_stack all_heaters_off Turn every output off (heater range 0 on outputs 1-4), like the front-panel All Off key, all_outputs_off Switch every output OFF (emergency stop for the whole supply). Each channel is switched aspirate_ul aspirate_ul auto_phase Run Auto Phase (APHS): shift the reference phase so that Y ≈ 0 and X ≈ R. The outputs then auto_range Optimise the input stage for the present signal: SR830 Auto Reserve (ARSV) or SR86x autofocus Run the configured autofocus device (e.g. a hardware focus lock) once; it moves the focus drive. autoscale Run the scope's automatic setup (AUTO key): it picks vertical scales, timebase and trigger calibrate calibrate + 61 more Every Pypi:labmcp Alicat tool, risk-classified, on the server page. adb_a11y_audit Run an automated accessibility audit on the current screen. Checks for: missing labels on interactive elements, undersized touch targets (<48dp), i... adb_airplane_cycle Cycle airplane mode on then off after a delay. Forces cellular re-registration — useful for radio diagnostics and network testing. adb_airplane_mode Toggle airplane mode on/off. Useful for resetting cellular registration during radio testing. adb_at_batch Send multiple AT commands sequentially and capture all responses. Useful for running a diagnostic sequence. Requires root. adb_at_probe Run a standard AT diagnostic probe: modem identification, signal quality, network registration, SIM status, and supported bands. Requires root. adb_at_send Send a single AT command to the modem and capture the response. Requires root. Use adb_at_detect to find the correct port, or specify it manually. adb_batch_actions Execute multiple input actions in a single tool call. Reduces ADB round-trips for multi-step UI interactions. Each action runs sequentially with an... adb_build_and_install Build a debug APK and install it on the connected device (convenience wrapper) adb_ci_run_tests Run Android instrumented tests (androidTest) via adb_ci_wait_boot Wait for a device or emulator to fully boot. Polls sys.boot_completed and waits for the launcher to be ready. Essential for CI pipelines. adb_connect Connect to a device over WiFi/TCP. Device must be paired first or have TCP/IP enabled. adb_disconnect Disconnect from a wireless device, or all wireless devices if no host specified + 60 more Every Deepadb tool, risk-classified, on the server page. execute_sql Execute a SQL statement with parameters: statement (string, required), warehouse_id (string, required), catalog (string, optional), schema (string,... repair_run repair_run run_job Run a Databricks job with parameters: job_id (string, required), job_parameters (dictionary, optional, job-level parameters) start_cluster Start a terminated Databricks cluster with parameter: cluster_id (string, required) execute_dbsql execute_dbsql execute_dbsql execute_dbsql databricks_cancel_all_runs databricks_cancel_all_runs databricks_cancel_quality_monitor_refresh databricks_cancel_quality_monitor_refresh databricks_cancel_run databricks_cancel_run databricks_cancel_statement databricks_cancel_statement databricks_create_execution_context databricks_create_execution_context databricks_create_global_init_script databricks_create_global_init_script + 59 more Every Databricks MCP Server tool, risk-classified, on the server page. kali_exploit_msfvenom_generate Generate custom payloads for Metasploit Framework.
Msfvenom is a payload generator and encoder combining msfpayload and msfencode.
**WARNING:** O... kali_network_masscan_scan High-speed port scanner capable of scanning the entire internet in minutes. Use with caution and proper authorization. kali_network_netdiscover_scan ARP reconnaissance tool for discovering hosts on a local network. Supports active and passive modes. kali_network_nmap_discover Discover live hosts on a network using Nmap. Supports ping, ARP, TCP, UDP, and ICMP discovery methods. kali_network_nmap_scan Perform network port scanning using Nmap.
Nmap (Network Mapper) is a powerful network scanner for discovering hosts, services, and potential vulne... kali_network_tcpdump_capture Capture network packets for analysis. Supports BPF filters and can save to PCAP files. kali_network_tshark_capture Wireshark CLI for packet capture and analysis with advanced filtering and multiple output formats. kali_password_hashcat_crack Advanced password recovery tool using GPU acceleration. Supports 300+ hash types. kali_password_hydra_brute Fast network login brute-forcer supporting many protocols.
Hydra is a parallelized login cracker which supports numerous protocols.
**Supported S... kali_password_john_crack John the Ripper password cracker supporting many hash formats and attack modes. kali_web_ffuf_fuzz Fast web fuzzer for discovering hidden files, directories, and parameters. URL must contain FUZZ keyword. kali_web_gobuster_dir Enumerate directories and files on web servers using wordlists.
Gobuster is a fast directory/file brute-forcing tool written in Go.
**Features:**... + 59 more Every Kali MCP Server tool, risk-classified, on the server page. Showing the 50 servers with the most execute tools — 19230 servers in the catalogue expose them. Find the rest through tool search or the policy library.
BROWSE OTHER CATEGORIES
FREQUENTLY ASKED QUESTIONS
Tools that trigger processes or run actions. High risk -- rate limits and argument validation recommended. There are 77314 execute tools across 19230 MCP servers in the PolicyLayer reference.
Execute tools need rate limits and argument validation. They can trigger builds, notifications, or expensive compute jobs.
Playwright MCP, Pentester-MCP, Jshookmcp, Ainumbers Mcp Apps, Mcp, and 19225 more.