kali-mcp-go

What it does

kali-mcp-go is a Go-based MCP server that enables AI agents to interact with professional security tools installed on a Kali Linux host. It is specifically designed for high concurrency and reliability during pentesting and Capture The Flag (CTF) challenges, overcoming the bottlenecks of single-worker Python implementations.

Tools

• nmap_scan: Port and service scanning.
• execute_command: Run arbitrary shell commands with SSE streaming.
• sqlmap_scan: Automatic SQL injection detection and exploitation.
• metasploit_run: Execute Metasploit modules via msfconsole.
• gobuster_scan: Directory and DNS brute-forcing.
• nikto_scan: Web server vulnerability scanning.
• wpscan_analyze: WordPress security analysis.
• hydra_attack: Fast password brute-forcing.
• john_crack: Password hash cracking.
• tshark_capture: Packet capture and analysis.

Installation

{
  "mcpServers": {
    "kali-mcp": {
      "command": "/path/to/mcp-client",
      "args": ["--server", "http://127.0.0.1:5000"],
      "env": {
        "KALI_MCP_API_TOKEN": "your-secret-token"
      }
    }
  }
}

Supported hosts

• Claude Desktop
• Claude Code
• Codex
• OpenCode