Kali MCP Server

Example Use Cases

• 1

  Execute Kali Linux security tools (nmap, sqlmap, gobuster, nikto, etc.) via an API to perform reconnaissance and scanning.

• 2

  Persistent interactive shell sessions (ssh, evil-winrm, mysql, etc.) with session management, sending commands and reading output over time.

• 3

  Assist with CTF challenges or penetration testing workflows by automating common enumeration and exploitation steps on a Kali host.

Description

K-MCP provides an HTTP/API interface that allows MCP-enabled AI clients to run Kali Linux commands and security tools (nmap, sqlmap, gobuster, evil-winrm, etc.) and manage persistent interactive sessions. It detects interactive vs. non-interactive tools, returns session IDs for ongoing interactions, and supports workflows like network reconnaissance, webapp testing, and Windows enumeration. The server is aimed at automating and augmenting security testing, CTF solving, and research by integrating AI agents directly with a Kali terminal. It emphasizes session management and tool access while warning about security considerations and responsible use.