Kali Linux MCP servers: which one to use
Use MCP-Kali-Server if you already run Kali. Pick zebbern for a ready-made Docker Kali, or kali-ssh to drive a Kali VM you already have.
- Servers
- 13
- active
- Local
- 2
- runs on your machine
These are community projects, but Kali's own tools page lists MCP-Kali-Server as a package you can install on Kali with apt. Each server lets an assistant run offensive security tools such as Nmap, sqlmap and Metasploit, so use them only on systems you are allowed to test. Run them in a VM or container you can throw away. Keep the API on localhost unless you add a token.
Good for
- Pentesters and red teamers who want an assistant to run recon and write up results
- CTF and HackTheBox players working through challenges with AI help
- Bug bounty hunters automating scans on in-scope targets
- Security teams that want an isolated lab for assistant-driven testing
Which Kali Linux MCP server to use
Use MCP-Kali-Server on a Kali box you already have, since Kali packages it. Choose zebbern for a disposable Docker Kali, or kali-ssh or kali-mcp-go when you want target scope limits.
| Server | Kali runs in | Access control | Tools | GitHub stars |
|---|---|---|---|---|
| MCP-Kali-ServerThis page | Your Kali machine | Localhost by default | – | 866 |
| zebbern Kali MCP | Docker container | Optional token | 135 | 52 |
| kali-mcp-go | DockerLinux host | Bearer token | 31 | 25 |
| kali-ssh-mcp | Your own VM | Scope allowlist | 6 | 24 |
| Kali AI Pentest MCP | Your Kali machine | Blocks risky commands | – | 70 |
All Kali Linux MCP servers
13 active · official first, then by GitHub stars
MCP-Kali-ServerLocalNo sign-inLets an AI assistant run Kali Linux security tools (nmap, gobuster, sqlmap, Metasploit and raw shell commands) on a Kali machine through a local API.
866 GitHub stars
awsome_kali_MCPServersawsome kali MCPServers is a set of MCP servers tailored for Kali Linux
110 GitHub stars
kali_mcpKali AI Pentest MCP tools 渗透测试工具集
70 GitHub stars
zebbern-kali-mcpMCP server for Kali toolkit (docker) - 121 tools for AI-assisted security testing give agents access to all it needs!
52 GitHub stars
kali-mcp-goMCP runtime for AI-assisted security testing with Kali tools, explicit target controls, bounded scanning, structured evidence, and persistent Docker deployment.
25 GitHub stars
kali-ssh-mcpMCP server bridging Claude/any LLM client to a persistent Kali Linux VM over SSH — scope-gated nmap, gobuster, nuclei & nikto with structured JSON output and full audit logging.
24 GitHub stars- kali-mcp-server
A Python MCP Server that connects Large Language Models natively to a comprehensive suite of offensive security tools.
10 GitHub stars - Kali_Linux_MCP
Two-component system bridging Kali Linux penetration testing tools with AI agents via MCP. Flask API server executes 10+ security tools (Nmap, SQLMap, Metasploit, etc.) while MCP client provides seamless AI integration for automated security workflows.
9 GitHub stars - kali-mcp
MCP server that gives AI assistants access to a Kali Linux Docker environment for security testing
5 GitHub stars - Kali-MCP-Commander
Kali MCP server for AI‑driven recon, scanning, and exploitation inside an isolated Docker container.
3 GitHub stars - ai-hacker-mcpLocal
MCP server for Kali Linux penetration testing - provides system prompts and tool listing for AI-assisted security testing
2 GitHub stars - Kali-MCP
AI-driven Kali pentesting over MCP — Streamable HTTP server + LLM agent client (nmap, gobuster, nikto, sqlmap, …)
2 GitHub stars - kali-mcp-server
A secure, containerized Model Context Protocol (MCP) server that bridges any MCP-compatible client with a full-featured Kali Linux environment for authorized security auditing.
2 GitHub stars
Questions
Is there an official Kali MCP server?
Kali packages one. Its tools page lists mcp-kali-server, the community MCP-Kali-Server project, as an apt install on Kali.
Do I need Kali installed?
Not for zebbern's server, which runs Kali in a Docker container. MCP-Kali-Server needs a Kali machine, and kali-ssh needs a Kali VM you can reach over SSH.
Which one is safest?
None is safe to point at systems you do not own. zebbern's README says it intentionally gives unrestricted command execution. kali-ssh adds a hard scope allowlist and an audit log, and kali-mcp-go signs target contexts and sets scan limits.
Can the assistant run Metasploit and Nmap?
Yes. MCP-Kali-Server's README lists Nmap, sqlmap, Hydra, Metasploit and others, plus raw commands. zebbern's README lists Nmap, sqlmap, nuclei, impacket and Metasploit.
Is the Kali API open to my network?
By default no. MCP-Kali-Server's kali-server-mcp binds to 127.0.0.1, and zebbern binds its ports to 127.0.0.1. For remote use zebbern says to set KALI_API_TOKEN and put TLS in front.
Does it work in Claude Desktop?
Yes. MCP-Kali-Server's README names Claude Desktop and 5ire, and kali-ssh names Claude Desktop.
Which one has CTF examples?
MCP-Kali-Server. Its README shows walkthroughs of a web CTF challenge and a Hack The Box machine.
Is it free?
Yes. MCP-Kali-Server, kali-mcp-go, zebbern's server and kali-ssh are all open source under the MIT license.