kali-mcp-tool
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| kali_execute_commandB | Executes a shell command directly on the Kali Linux host system. Args: command: The shell command line to execute (e.g. 'nmap -sS 192.168.1.1', 'nikto -h http://example.com') timeout_seconds: Maximum time in seconds before terminating the command (default: 300s) cwd: Working directory path for execution (default: ./kali_workspace) |
| kali_search_toolsA | Searches installed Kali Linux tools by name, keyword, or category. Categories include: 'information-gathering', 'vulnerability-analysis', 'web-application-analysis', 'password-attacks', 'wireless-attacks', 'reverse-engineering', 'exploitation-tools', 'sniffing-spoofing', 'post-exploitation', 'forensics' |
| kali_get_tool_helpA | Retrieves complete manual (manpage) or --help documentation for any Kali Linux tool. Args: tool_name: Name of the binary utility (e.g. 'nmap', 'sqlmap', 'john', 'aircrack-ng') |
| kali_run_nmapB | Runs Nmap network scanner against target hosts with options. Args: target: Target IP address, hostname, or subnet (e.g. '192.168.1.1' or 'scanme.nmap.org') options: Nmap flags (default: '-sV -F' fast service version scan) |
| kali_run_sqlmapA | Runs Sqlmap automatic SQL injection and database takeover tool. Args: target_url: Target URL to test (e.g. 'http://testphp.vulnweb.com/artists.php?artist=1') options: Sqlmap flags (default: '--batch --banner' non-interactive banner scan) |
| kali_run_gobusterB | Runs Gobuster URI/directory brute-forcer. Args: target_url: Target URL (e.g. 'http://192.168.1.100') wordlist: Path to wordlist file (default: '/usr/share/wordlists/dirb/common.txt') options: Additional gobuster dir flags (e.g. '-x php,html,txt') |
| kali_run_searchsploitA | Searches Exploit-DB offline database via Searchsploit. Args: query: Search keywords (e.g. 'Apache 2.4', 'WordPress 5.0', 'Linux Kernel 5.4') |
| kali_manage_workspaceA | Manages files inside the local Kali workspace folder. Args: action: 'list' (list files), 'read' (read file content), 'write' (create/overwrite file), 'delete' (remove file) filename: Relative filename in workspace content: Text content (required when action is 'write') |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/VibeCode-cell/kali-mcp-tool'
If you have feedback or need assistance with the MCP directory API, please join our Discord server