# container_stop

Stop and remove the Kali Linux Docker container.

Agent View of the PolicyLayer registry record for `container_stop`. HTML page: https://policylayer.com/tools/hannes221-kali-mcp/container-stop

## Facts

- Tool: `container_stop`
- Server: Kali (`hannes221/kali-mcp`) — https://policylayer.com/tools/hannes221-kali-mcp.md
- Homepage: https://github.com/Hannes221/kali-mcp
- Risk category: Destructive (Critical risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Hidden

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "container_stop",
    "arguments": {}
  }
}
```

## Why container_stop is rated Critical

The tool explicitly removes the Docker container, which is an irreversible destructive action — any in-container state, running processes, and unsaved data are permanently lost. 'Remove' indicates the container is deleted, not merely paused. Combined with the server's ability to run tools like metasploit and sqlmap, misuse could terminate active security operations and lose all associated session data.

From the tool's own definition: "Stop and remove the Kali Linux Docker container"

## Use case

AI agents call container_stop to permanently remove resources in Kali, typically in cleanup and lifecycle workflows. It does its job in a single call, and there is no undo.

## Recommended policy (PolicyLayer)

Verdict: **Hidden**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Kali:

```json
{
  "version": "1",
  "default": "deny",
  "hide": [
    "container_stop"
  ]
}
```

## Other tools on Kali (6)

- `container_start` — Execute — https://policylayer.com/tools/hannes221-kali-mcp/container-start.md
- `execute_command` — Execute — https://policylayer.com/tools/hannes221-kali-mcp/execute-command.md
- `container_status` — Read — https://policylayer.com/tools/hannes221-kali-mcp/container-status.md
- `download_file` — Read — https://policylayer.com/tools/hannes221-kali-mcp/download-file.md
- `list_files` — Read — https://policylayer.com/tools/hannes221-kali-mcp/list-files.md
- `upload_file` — Write — https://policylayer.com/tools/hannes221-kali-mcp/upload-file.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=hannes221-kali-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/hannes221-kali-mcp