# Kali Security MCP MCP server

Agent View of the PolicyLayer registry record for Kali Security MCP: identity, probed posture, risk grade, and all 194 tools classified. HTML page: https://policylayer.com/tools/seac-25-kali-security-mcp

## Facts

- Server id: `seac-25/kali-security-mcp`
- Homepage: https://github.com/SeaC-25/Kali-Security-MCP
- Registry record: grade F, identity unverified
- Lifecycle: active
- Rate-limited: no
- Tools: 194
- Tool categories present: Execute, Read, Write
- Tags: seac 25 kali security mcp, automation
- Record last modified: 2026-08-31T12:07:07.670Z

## Tools (194)

| Tool | Category | Risk | Record |
| --- | --- | --- | --- |
| `adaptive_cmdi_test` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/adaptive-cmdi-test.md |
| `adaptive_create_execution_context` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/adaptive-create-execution-context.md |
| `adaptive_execute_strategy` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/adaptive-execute-strategy.md |
| `adaptive_intelligent_orchestration` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/adaptive-intelligent-orchestration.md |
| `adaptive_network_penetration` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/adaptive-network-penetration.md |
| `adaptive_sqli_test` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/adaptive-sqli-test.md |
| `adaptive_web_penetration` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/adaptive-web-penetration.md |
| `adaptive_xss_test` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/adaptive-xss-test.md |
| `add_chain_step` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/add-chain-step.md |
| `agent_run` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/agent-run.md |
| `aircrack_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/aircrack-attack.md |
| `apt_comprehensive_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/apt-comprehensive-attack.md |
| `apt_network_penetration` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/apt-network-penetration.md |
| `apt_web_application_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/apt-web-application-attack.md |
| `arp_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/arp-scan.md |
| `auth_bypass_test` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/auth-bypass-test.md |
| `authorized_comprehensive_security_assessment` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/authorized-comprehensive-security-assessment.md |
| `authorized_controlled_validation` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/authorized-controlled-validation.md |
| `authorized_credential_assessment` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/authorized-credential-assessment.md |
| `authorized_environment_review` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/authorized-environment-review.md |
| `authorized_injection_verification` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/authorized-injection-verification.md |
| `authorized_network_exposure_assessment` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/authorized-network-exposure-assessment.md |
| `authorized_template_validation` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/authorized-template-validation.md |
| `authorized_web_application_assessment` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/authorized-web-application-assessment.md |
| `auto_reverse_analyze` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/auto-reverse-analyze.md |
| `bandit_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/bandit-scan.md |
| `bettercap_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/bettercap-attack.md |
| `browser_click` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/browser-click.md |
| `browser_close_session` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/browser-close-session.md |
| `browser_execute_js` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/browser-execute-js.md |
| `browser_intercept_request` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/browser-intercept-request.md |
| `browser_navigate` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/browser-navigate.md |
| `browser_start_session` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/browser-start-session.md |
| `browser_type_text` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/browser-type-text.md |
| `brutespray_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/brutespray-attack.md |
| `bully_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/bully-attack.md |
| `code_audit_comprehensive` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/code-audit-comprehensive.md |
| `compile_task_handoff` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/compile-task-handoff.md |
| `comprehensive_recon` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/comprehensive-recon.md |
| `continue_from_handoff` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/continue-from-handoff.md |
| `create_attack_chain` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/create-attack-chain.md |
| `cross_validate_vulns` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/cross-validate-vulns.md |
| `crowbar_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/crowbar-attack.md |
| `ctf_pwn_solver` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/ctf-pwn-solver.md |
| `ctf_quick_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/ctf-quick-scan.md |
| `ctf_web_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/ctf-web-attack.md |
| `detect_blind_vulnerability` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/detect-blind-vulnerability.md |
| `dirb_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/dirb-scan.md |
| `dnsenum_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/dnsenum-scan.md |
| `dnsrecon_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/dnsrecon-scan.md |
| `enum4linux_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/enum4linux-scan.md |
| `execute_command` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/execute-command.md |
| `fast_reconnaissance` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/fast-reconnaissance.md |
| `feroxbuster_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/feroxbuster-scan.md |
| `ffuf_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/ffuf-scan.md |
| `fierce_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/fierce-scan.md |
| `flawfinder_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/flawfinder-scan.md |
| `fping_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/fping-scan.md |
| `fuzz_all_params` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/fuzz-all-params.md |
| `fuzz_parameter` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/fuzz-parameter.md |
| `generate_attack_paths` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/generate-attack-paths.md |
| `generate_poc_from_current_session` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/generate-poc-from-current-session.md |
| `generate_poc_from_session` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/generate-poc-from-session.md |
| `ghidra_analyze_binary` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/ghidra-analyze-binary.md |
| `gobuster_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/gobuster-scan.md |
| `grpc_call` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/grpc-call.md |
| `hashcat_crack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/hashcat-crack.md |
| `http_compare` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/http-compare.md |
| `http_replay` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/http-replay.md |
| `http_send` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/http-send.md |
| `http_send_raw` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/http-send-raw.md |
| `http_session_manage` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/http-session-manage.md |
| `httpx_probe` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/httpx-probe.md |
| `hydra_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/hydra-attack.md |
| `intelligent_apt_campaign` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/intelligent-apt-campaign.md |
| `issue_vulnerability` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/issue-vulnerability.md |
| `john_crack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/john-crack.md |
| `joomscan_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/joomscan-scan.md |
| `kali_run` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/kali-run.md |
| `llm_auto_pentest` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/llm-auto-pentest.md |
| `masscan_fast_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/masscan-fast-scan.md |
| `medusa_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/medusa-attack.md |
| `metasploit_run` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/metasploit-run.md |
| `multi_target_execute_batch` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/multi-target-execute-batch.md |
| `multi_target_orchestrate` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/multi-target-orchestrate.md |
| `ncrack_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/ncrack-attack.md |
| `netdiscover_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/netdiscover-scan.md |
| `nikto_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/nikto-scan.md |
| `nmap_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/nmap-scan.md |
| `nuclei_cve_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/nuclei-cve-scan.md |
| `nuclei_network_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/nuclei-network-scan.md |
| `nuclei_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/nuclei-scan.md |
| `nuclei_technology_detection` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/nuclei-technology-detection.md |
| `nuclei_web_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/nuclei-web-scan.md |
| `parallel_directory_scanning` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/parallel-directory-scanning.md |
| `parallel_port_scanning` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/parallel-port-scanning.md |
| `patator_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/patator-attack.md |
| `pixiewps_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/pixiewps-attack.md |
| `proxy_start` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/proxy-start.md |
| `pwn_comprehensive_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/pwn-comprehensive-attack.md |
| `quick_pwn_check` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/quick-pwn-check.md |
| `radare2_analyze_binary` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/radare2-analyze-binary.md |
| `reaver_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/reaver-attack.md |
| `recon_ng_run` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/recon-ng-run.md |
| `run_playbook` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/run-playbook.md |
| `run_surface_chain` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/run-surface-chain.md |
| `run_surface_chain_multi` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/run-surface-chain-multi.md |
| `scan_start` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/scan-start.md |
| `scan_wait` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/scan-wait.md |
| `semgrep_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/semgrep-scan.md |
| `sqlmap_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/sqlmap-scan.md |
| `start_adaptive_apt_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/start-adaptive-apt-attack.md |
| `start_attack_session` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/start-attack-session.md |
| `start_task` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/start-task.md |
| `subfinder_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/subfinder-scan.md |
| `submit_apt_attack_chain` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/submit-apt-attack-chain.md |
| `submit_concurrent_task` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/submit-concurrent-task.md |
| `submit_workflow` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/submit-workflow.md |
| `trigger_next_attack_phase` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/trigger-next-attack-phase.md |
| `verify_finding` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/verify-finding.md |
| `verify_vulnerability` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/verify-vulnerability.md |
| `wfuzz_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/wfuzz-scan.md |
| `whatweb_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/whatweb-scan.md |
| `workflow_execute` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/workflow-execute.md |
| `wpscan_scan` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/wpscan-scan.md |
| `ws_connect` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/ws-connect.md |
| `ws_fuzz` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/ws-fuzz.md |
| `ws_send` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/ws-send.md |
| `yersinia_attack` | Execute | High | https://policylayer.com/tools/seac-25-kali-security-mcp/yersinia-attack.md |
| `adaptive_get_execution_status` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/adaptive-get-execution-status.md |
| `adaptive_get_insights` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/adaptive-get-insights.md |
| `agent_status` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/agent-status.md |
| `amass_scan` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/amass-scan.md |
| `analyze_attack_chain` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/analyze-attack-chain.md |
| `analyze_response` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/analyze-response.md |
| `attack_coverage` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/attack-coverage.md |
| `authorized_asset_inventory` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/authorized-asset-inventory.md |
| `authorized_surface_mapping` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/authorized-surface-mapping.md |
| `authorized_web_exposure_review` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/authorized-web-exposure-review.md |
| `binwalk_analysis` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/binwalk-analysis.md |
| `browser_extract_content` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/browser-extract-content.md |
| `browser_get_network_log` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/browser-get-network-log.md |
| `browser_heartbeat_status` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/browser-heartbeat-status.md |
| `browser_list_sessions` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/browser-list-sessions.md |
| `browser_screenshot` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/browser-screenshot.md |
| `extract_endpoints` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/extract-endpoints.md |
| `fingerprint_target` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/fingerprint-target.md |
| `get_adaptive_attack_status` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/get-adaptive-attack-status.md |
| `get_attack_chains` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/get-attack-chains.md |
| `get_attack_session_details` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/get-attack-session-details.md |
| `get_attack_strategy` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/get-attack-strategy.md |
| `get_concurrent_system_stats` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/get-concurrent-system-stats.md |
| `get_ctf_challenges_status` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/get-ctf-challenges-status.md |
| `get_detected_flags` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/get-detected-flags.md |
| `get_recommended_payloads` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/get-recommended-payloads.md |
| `get_task` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/get-task.md |
| `get_task_status` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/get-task-status.md |
| `get_vuln_candidates` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/get-vuln-candidates.md |
| `get_vuln_report` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/get-vuln-report.md |
| `get_workflow_status` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/get-workflow-status.md |
| `graph_next_actions` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/graph-next-actions.md |
| `graph_query` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/graph-query.md |
| `grpc_reflect` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/grpc-reflect.md |
| `http_history` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/http-history.md |
| `identify_attack_surfaces` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/identify-attack-surfaces.md |
| `list_attack_sessions` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/list-attack-sessions.md |
| `list_poc_templates` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/list-poc-templates.md |
| `multi_target_get_status` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/multi-target-get-status.md |
| `observe_task` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/observe-task.md |
| `propose_insights` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/propose-insights.md |
| `proxy_get_intercepted` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/proxy-get-intercepted.md |
| `reverse_tool_check` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/reverse-tool-check.md |
| `scan_collect` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/scan-collect.md |
| `scan_jobs` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/scan-jobs.md |
| `searchsploit_search` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/searchsploit-search.md |
| `server_health` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/server-health.md |
| `shellcheck_scan` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/shellcheck-scan.md |
| `sherlock_search` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/sherlock-search.md |
| `sublist3r_scan` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/sublist3r-scan.md |
| `task_status` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/task-status.md |
| `theharvester_osint` | Read | Low | https://policylayer.com/tools/seac-25-kali-security-mcp/theharvester-osint.md |
| `add_ctf_challenge` | Write | Medium | https://policylayer.com/tools/seac-25-kali-security-mcp/add-ctf-challenge.md |
| `create_ctf_session` | Write | Medium | https://policylayer.com/tools/seac-25-kali-security-mcp/create-ctf-session.md |
| `disable_ctf_mode` | Write | Medium | https://policylayer.com/tools/seac-25-kali-security-mcp/disable-ctf-mode.md |
| `enable_ctf_mode` | Write | Medium | https://policylayer.com/tools/seac-25-kali-security-mcp/enable-ctf-mode.md |
| `end_attack_session` | Write | Medium | https://policylayer.com/tools/seac-25-kali-security-mcp/end-attack-session.md |
| `export_task_summary` | Write | Medium | https://policylayer.com/tools/seac-25-kali-security-mcp/export-task-summary.md |
| `graph_mark_dead` | Write | Medium | https://policylayer.com/tools/seac-25-kali-security-mcp/graph-mark-dead.md |
| `graph_upsert` | Write | Medium | https://policylayer.com/tools/seac-25-kali-security-mcp/graph-upsert.md |
| `log_attack_step` | Write | Medium | https://policylayer.com/tools/seac-25-kali-security-mcp/log-attack-step.md |
| `multi_target_add_target` | Write | Medium | https://policylayer.com/tools/seac-25-kali-security-mcp/multi-target-add-target.md |
| `proxy_add_rule` | Write | Medium | https://policylayer.com/tools/seac-25-kali-security-mcp/proxy-add-rule.md |
| `task_timeline` | Write | Medium | https://policylayer.com/tools/seac-25-kali-security-mcp/task-timeline.md |
| `workflow_define` | Write | Medium | https://policylayer.com/tools/seac-25-kali-security-mcp/workflow-define.md |

## Tool descriptions

- `adaptive_cmdi_test` — 自适应命令注入测试
- `adaptive_create_execution_context` — 创建自适应执行上下文
- `adaptive_execute_strategy` — 执行自适应策略
- `adaptive_intelligent_orchestration` — 智能编排多目标自适应攻击
- `adaptive_network_penetration` — 自适应网络渗透测试 - 智能化网络攻击。
- `adaptive_sqli_test` — 自适应SQL注入测试 - 智能检测和利用
- `adaptive_web_penetration` — 自适应Web渗透测试 - 智能化Web应用攻击。
- `adaptive_xss_test` — 自适应XSS测试 - 上下文感知的XSS检测
- `apt_comprehensive_attack` — 执行APT综合攻击链 - 全面的多向量并发攻击。
- `apt_network_penetration` — 执行APT网络渗透攻击链 - 自动化多阶段网络渗透测试。
- `apt_web_application_attack` — 执行APT Web应用攻击链 - 自动化多阶段Web应用渗透。
- `arp_scan` — Execute arp-scan for network discovery.
- `auth_bypass_test` — 认证绕过测试 - 内置工作流
- `authorized_comprehensive_security_assessment` — Run authorized full-chain assessment using neutral external naming.
- `authorized_controlled_validation` — Run controlled validation phase only when allowed_actions permits it.
- `authorized_credential_assessment` — Run authorized credential audit phase only when allowed_actions permits it.
- `authorized_environment_review` — Run environment review phase only when allowed_actions permits it.
- `authorized_injection_verification` — Run non-destructive injection verification only (no dump/exfiltration).
- `authorized_network_exposure_assessment` — Run authorized network exposure assessment with phase-level output.
- `authorized_template_validation` — Run template-based security validation with constrained severity scope.
- `authorized_web_application_assessment` — Run authorized web assessment with exposure review and vuln validation.
- `auto_reverse_analyze` — 自动选择可用工具进行逆向分析 - 智能工具选择
- `browser_click` — 模拟人工点击页面元素（带随机延迟和鼠标移动模拟）
- `browser_close_session` — 关闭浏览器会话并保存状态（cookies/storage持久化到磁盘）
- `browser_execute_js` — 在浏览器上下文中执行JavaScript代码
- `browser_navigate` — 在已有会话中导航到新页面
- `bully_attack` — Execute bully for WPS attacks.
- `compile_task_handoff` — Compile handoff/progress for resume (do-not-rescan + next_actions).
- `continue_from_handoff` — Resume plan from last handoff without forcing full rescan.
- `create_attack_chain` — 创建攻击链。
- `cross_validate_vulns` — 交叉验证黑盒和白盒发现的漏洞，提升置信度。
- `ctf_quick_scan` — CTF快速扫描 - 针对CTF环境优化的快速漏洞发现。
- `ctf_web_attack` — CTF Web攻击链 - 专门针对CTF Web题目的攻击。
- `detect_blind_vulnerability` — 盲注漏洞检测 - 基于响应差异
- `dirb_scan` — 使用 Dirb 执行目录枚举。
- `dnsenum_scan` — 使用 Dnsenum 执行 DNS 枚举。
- `enum4linux_scan` — Execute Enum4linux Windows/Samba enumeration tool.
- `execute_command` — Execute an arbitrary command on the Kali server.
- `fast_reconnaissance` — 执行快速侦察工作流。
- `feroxbuster_scan` — 使用 Feroxbuster 执行目录与资源爆破。
- `fierce_scan` — 使用 Fierce 执行 DNS 侦察。
- `fping_scan` — Execute fping for fast ping sweeps.
- `fuzz_all_params` — 全参数模糊测试 - 自动识别并测试所有参数
- `generate_attack_paths` — 生成针对目标的APT攻击路径。
- `generate_poc_from_current_session` — 从当前活跃会话生成PoC - 无需指定会话ID，直接从当前会话生成。
- `generate_poc_from_session` — 从指定攻击会话生成PoC - 自动分析攻击链并生成多种格式的PoC。
- `ghidra_analyze_binary` — 使用Ghidra分析二进制文件 - NSA开源逆向分析工具
- `http_compare` — 比较两个HTTP响应的差异 - 用于盲注检测
- `http_replay` — 重放历史HTTP请求，可修改参数
- `http_send_raw` — 发送原始HTTP请求 - 完全控制请求格式
- `intelligent_apt_campaign` — 智能APT攻击活动 - 最高级别的自适应攻击。
- `joomscan_scan` — Execute joomscan for Joomla security testing.
- `medusa_attack` — 使用 Medusa 执行口令验证测试。
- `metasploit_run` — Execute a Metasploit module.
- `multi_target_execute_batch` — 批量执行多目标攻击任务
- `multi_target_orchestrate` — 执行多目标攻击编排
- `ncrack_attack` — 使用 Ncrack 执行网络服务凭据验证。
- `nikto_scan` — Execute Nikto web server scanner.
- `nuclei_cve_scan` — Execute Nuclei CVE vulnerability scan.
- `nuclei_network_scan` — Execute Nuclei network security scan.
- `nuclei_technology_detection` — Execute Nuclei technology detection scan.
- `nuclei_web_scan` — Execute Nuclei web application security scan.
- `parallel_directory_scanning` — 并行执行多个目标的目录扫描。
- `parallel_port_scanning` — 并行执行多个目标的端口扫描。
- `proxy_start` — 启动代理服务器 - 用于流量拦截
- `radare2_analyze_binary` — 使用Radare2分析二进制文件 - 开源逆向分析工具
- `reaver_attack` — Execute Reaver for WPS PIN attacks.
- `recon_ng_run` — Execute recon-ng for reconnaissance.
- `run_playbook` — Run a named playbook (web_surface | api_surface | auth_surface | svc_surface).
- `scan_start` — Start a heavy scan in background; returns job_id immediately.
- `scan_wait` — Block until an async scan job finishes or timeout_s elapses.
- `sqlmap_scan` — Execute SQLmap SQL injection scanner.
- `start_attack_session` — 开始新的攻击会话 - 启动自动日志记录和PoC生成。
- `start_task` — Create/open a task workspace and seed target graph nodes.
- `subfinder_scan` — Execute Subfinder for fast subdomain discovery.
- `submit_apt_attack_chain` — 提交APT攻击链工作流 - 基于知识图谱的智能化并发攻击。
- `submit_concurrent_task` — 提交并发任务。
- `trigger_next_attack_phase` — 手动触发下一攻击阶段 - 强制进入下一轮攻击。
- `verify_finding` — Verify a candidate finding by replaying command and matching expected_signal.
- `verify_vulnerability` — 验证候选漏洞 (candidate → verified/failed)。
- `wfuzz_scan` — 使用 Wfuzz 执行参数与路径模糊测试。
- `workflow_execute` — 执行测试工作流
- `ws_connect` — 建立WebSocket连接
- `ws_fuzz` — WebSocket模糊测试
- `adaptive_get_execution_status` — 获取执行上下文状态
- `adaptive_get_insights` — 获取自适应执行洞察
- `agent_status` — 多智能体集群健康与统计信息。
- `amass_scan` — 使用 Amass 执行子域名与资产枚举。
- `analyze_attack_chain` — 评估攻击链可��性 (0-100分)。
- `analyze_response` — 深度响应分析 - 漏洞指标检测
- `attack_coverage` — ATT&CK technique label coverage for task findings (report appendix; not a runtime driver).
- `authorized_asset_inventory` — Build authorized external asset inventory (subdomains + live hosts).
- `authorized_surface_mapping` — Perform authorized attack-surface mapping (non-destructive).
- `authorized_web_exposure_review` — Review web exposure through content discovery and service checks.
- `browser_list_sessions` — 列出所有活跃的浏览器会话
- `browser_screenshot` — 截取页面截图（支持全页面和元素截图）
- `extract_endpoints` — 从响应中提取端点和API路径
- `fingerprint_target` — 目标技术指纹识别
- `get_adaptive_attack_status` — 获取自适应攻击状态 - 查看攻击进展和发现的信息。
- `get_attack_chains` — 查询攻击链列表。
- `get_attack_session_details` — 获取攻击会话详情 - 查看指定会话的完整攻击历史。
- `get_attack_strategy` — 获取攻击策略推荐 - 基于历史成功率
- `get_concurrent_system_stats` — 获取并发任务系统统计信息。
- `get_ctf_challenges_status` — 获取所有CTF题目的状态。
- `get_detected_flags` — 获取所有检测到的Flag。
- `get_recommended_payloads` — 获取推荐的Payload - 基于历史数据和目标特征
- `get_task` — Get task meta, graph summary, findings counts and recent actions.
- `get_task_status` — 获取任务状态。
- `get_vuln_candidates` — 获取待验证的候选漏洞列表 (按严重程度排序)。
- `get_vuln_report` — 导出漏洞评估报告。
- `get_workflow_status` — 获取工作流状态。
- `graph_next_actions` — List next actions from graph (optionally include insight-sourced checks).
- `graph_query` — Query graph nodes.
- `grpc_reflect` — gRPC服务反射 - 获取服务定义
- `http_history` — 查看HTTP请求历史
- `identify_attack_surfaces` — 基于目标信息识别攻击面。
- `list_attack_sessions` — 获取所有攻击会话列表 - 查看历史和当前的所有攻击会话。
- `list_poc_templates` — 获取可用的PoC模板 - 查看系统支持的所有PoC生成模板。
- `multi_target_get_status` — 获取多目标协调系统状态
- `observe_task` — Observer side-channel: detect duplicate tool calls / empty streaks; advise only by default.
- `propose_insights` — Insight branch: produce graph-bound Hypothesis candidates only (never drives executor).
- `proxy_get_intercepted` — 获取已拦截的请求列表
- `reverse_tool_check` — 检查可用的逆向分析工具 - 检测本机逆向工程工具
- `scan_collect` — Poll an async scan job; returns running/done/expired/not_found + result.
- `scan_jobs` — List currently running async scan jobs.
- `searchsploit_search` — Search exploit database using searchsploit.
- `server_health` — Check the health status of the Kali API server.
- `sublist3r_scan` — 使用 Sublist3r 执行子域名枚举。
- `task_status` — Real-time task dashboard: phase, graph size, verified count, recent actions, report paths.
- `add_ctf_challenge` — 添加CTF题目到当前会话。
- `create_ctf_session` — 创建CTF竞赛会话。
- `disable_ctf_mode` — 禁用CTF竞赛模式，返回正常渗透测试模式。
- `enable_ctf_mode` — 启用CTF竞赛模式。
- `end_attack_session` — 结束当前攻击会话 - 完成日志记录并保存会话数据。
- `export_task_summary` — Export task report: JSON + Markdown primary; optional docx (python-docx).
- `graph_mark_dead` — Mark a graph node dead so it stops generating next actions.
- `graph_upsert` — Upsert a graph node. next_checks is comma-separated. meta_json is optional JSON object.
- `multi_target_add_target` — 添加新目标到多目标协调系统
- `task_timeline` — Read-only action_log timeline (what/when). No new write path.
- `workflow_define` — 定义测试工作流

## Related servers

- UnClick (1662 tools) — https://policylayer.com/tools/io-github-malamutemayhem-unclick-mcp-server.md
- Delx Mcp A2a (1082 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-mcp-a2a.md
- Delx Protocol — Agent Recovery & Continuity (1076 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-protocol.md
- Nodebench (824 tools) — https://policylayer.com/tools/io-github-homenshum-nodebench.md
- MCP Framework Personal (811 tools) — https://policylayer.com/tools/inggerman-mcps.md
- Delx MCP Server (740 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-mcp-server.md
- Binance MCP Server (734 tools) — https://policylayer.com/tools/nirholas-binance-mcp.md
- Crawlora (728 tools) — https://policylayer.com/tools/crawlora-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=seac-25-kali-security-mcp · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/seac-25-kali-security-mcp