wpscan_scan

What wpscan_scan does on Kali Security MCP

AI agents invoke wpscan_scan to trigger actions in Kali Security MCP. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why wpscan_scan is rated High

WPScan is an active scanning tool that probes target WordPress installations for vulnerabilities, misconfigurations, exposed users, and weak credentials. It executes network requests against external targets, constituting an active security operation. The server context (Kali Linux pentest tooling) confirms offensive/active use. Empty description lowers confidence slightly, but the tool name is unambiguous.

From the tool's definition Tool name 'wpscan_scan' references WPScan, a well-known WordPress vulnerability scanner used in penetration testing. Server description states it integrates 193 Kali Linux security tools for penetration testing and vulnerability assessment.

The rule that runs wpscan_scan safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Kali Security MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For wpscan_scan, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "wpscan_scan": {
      "limits": [
        {
          "counter": "wpscan_scan_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about wpscan_scan