Kali Linux has introduced native AI powered penetration testing by integrating Anthropic Claude through the open Model Context Protocol.
Quick Summary – TLDR:
- Kali Linux now supports Claude AI for natural language driven penetration testing
- Integration uses the Model Context Protocol or MCP as a secure bridge
- Security tools like Nmap, Gobuster, Nikto, Metasploit, and SQLMap can be triggered using plain English prompts
- Experts warn about privacy and security risks when using cloud hosted large language models
What Happened?
The Kali Linux development team has rolled out an AI enabled workflow that allows penetration testers to run offensive security tools using simple English commands. Instead of manually typing terminal commands, users can now issue prompts to Claude AI, which interprets the request and executes the necessary tools on a connected Kali Linux system.
The integration connects Claude Desktop on macOS with a Kali instance through the Model Context Protocol, creating a structured and automated command execution loop.
Kali & LLM: macOS with Claude Desktop GUI & Anthropic Sonnet LLM: This post will focus on an alternative method of using Kali Linux, moving beyond direct terminal command execution. Instead, we will leverage a Large Language Model (LLM) to translate… https://t.co/4FgYYCjePl pic.twitter.com/AFnB1HUh2F
— Kali Linux (@kalilinux) February 25, 2026
How the Integration Works?
At the core of this setup is a three layer architecture that separates the user interface, intelligence engine, and execution environment.
- User Interface: Claude Desktop running on macOS or Windows.
- AI Engine: Anthropic Claude Sonnet 4.5 hosted in the cloud.
- Execution Layer: Kali Linux system running the mcp kali server package.
- Protocol Bridge: Model Context Protocol connecting AI to security tools.
When a user types a request such as requesting a port scan of scanme.nmap.org, Claude determines which tool is required. It then sends a structured request through MCP to the Kali server. The server executes the command, returns structured output, and Claude summarizes the findings. If needed, it automatically runs follow up commands to complete the task.
This creates a closed workflow: prompt, plan, execute, interpret, and repeat if necessary.
Supported Security Tools
The mcp kali server exposes many commonly used offensive security tools, including:
- Nmap for network and port scanning
- Gobuster and Dirb for directory enumeration
- Nikto for web server vulnerability scanning
- Hydra and John the Ripper for credential attacks
- Metasploit Framework for exploitation
- SQLMap and WPScan for database and WordPress testing
- Enum4linux ng for SMB enumeration
During testing documented by the Kali team, Claude verified tool availability, executed commands like nmap sV scanme.nmap.org, detected open ports such as 80 TCP and 443 TCP, and presented parsed results in the chat interface. Server logs confirmed live execution and structured API responses from the Flask based backend.
Setup and Configuration
Setting up the system requires secure shell access between the macOS client and the Kali machine. Users must install openssh server on Kali and generate an Ed25519 SSH key on macOS for passwordless authentication.
After installing the mcp kali server package using apt, the service runs locally on port 5000. Users then edit the Claude Desktop configuration file to add the Kali server connection details. Once approved inside Claude, the AI gains permission to trigger remote commands.
Kali recommends installing additional offensive tools and wordlists to ensure full functionality. When prompted, Claude requests user approval before executing commands, adding a layer of human oversight.
Security and Privacy Considerations
While the integration improves workflow efficiency, security researchers have raised concerns about prompt injection risks, over permissioned tool access, and limited audit logging.
Industry guidance from Red Hat and Fluid Attacks recommends:
- Enforcing least privilege access
- Validating all inputs
- Maintaining immutable logs
- Requiring human approval for high risk commands
The Kali team also emphasizes that routing commands through a cloud hosted large language model may raise privacy concerns, especially during sensitive client engagements.
A Shift Toward Agentic Pentesting
This integration signals a broader move toward AI augmented offensive security. Instead of replacing experts, Claude acts as an intelligent assistant that interprets output, prioritizes risks, and helps generate structured findings.
For experienced professionals, it reduces repetitive command crafting. For newcomers, it provides guided workflows across reconnaissance and vulnerability assessment tasks.
As adoption of the Model Context Protocol grows across the cybersecurity ecosystem, AI driven penetration testing is rapidly shifting from experimental concept to practical deployment.
SQ Magazine’s Takeaway
I believe this is a major step forward for offensive security. AI is no longer just analyzing logs or generating reports. It is actively participating in command execution and workflow planning. That said, I would be cautious about privacy and cloud exposure before using this in a real client engagement. The productivity gains are real, but security teams must balance speed with control. This feels like the beginning of agent driven security operations, and it will only get smarter from here.
