Don't use in production.

edit:

This was my first go at this and it implimented Docker DOOD architecture which binds to the hosts docker.socket, which gives the container control of the host's docker daemon which isn't great for security, but would be great for persistence, especially if the container is burried multiple containers deep as we only have visibility on the outer containers.

Use my newer repo if you want agentic AI pentesting with a Kali docker container.

https://github.com/timsonner/kali-mcp-server

Use this repo as a basis for learning or persistence mechanisms or a base for whatever.

The new new is waaaay better.

01/04/2026

the chat-kitties go meow

dotnet-docker-kali-mcp-server

VS Code client runs commands as root in Kali docker image using "kali-exec" MCP server

Quick Start

Pull kali Docker image

docker pull docker.io/kalilinux/kali-rolling

Clone repo

git clone https://github.com/timsonner/dotnet-docker-kali-mcp-server.git
cd KaliMCP

Install dotnet MCP libraries

dotnet add package ModelContextProtocol --version 0.3.0-preview.4
dotnet add package Microsoft.Extensions.Hosting

Containerize the app

docker build -t kali-mcp-server .

Connect VS Code client to MCP server

docker mcp client connect vscode

Start MCP server

Click "Start" next to "kali-mcp-server" MCP server in mcp.json

Start new CoPilot chat

Hi, copilot. Run this command in terminal "docker run --rm -it -p 80:80 vulnerables/web-dvwa
" Once that completes, perform sqlmap against host.docker.internal:80 using kali-exec.

Manual Project Creation (not Quick Start)

Pull kali Docker image

docker pull docker.io/kalilinux/kali-rolling

Create project

mkdir <name of folder that contains project>
git init
dotnet new console -n <name of project>
mkdir -p .vscode && touch .vscode/mcp.json

Modify mcp.json

mcp.json

{
    "servers": {
        "kali-mcp-server": {
            "command": "docker",
            "args": [
                "run",
                "--rm",
                "-i",
                "--user",
                "root",
                "-v",
                "/var/run/docker.sock:/var/run/docker.sock",
                "kali-mcp-server"
            ],
            "type": "stdio"
        },
        "MCP_DOCKER": {
            "command": "docker",
            "args": [
                "mcp",
                "gateway",
                "run"
            ],
            "type": "stdio"
        }
    }
}   

Install dotnet MCP libraries

cd <project name>
dotnet add package ModelContextProtocol --version 0.3.0-preview.4
dotnet add package Microsoft.Extensions.Hosting

Modify Program.cs

program.cs

using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Hosting;
using Microsoft.Extensions.Logging;

var builder = Host.CreateApplicationBuilder(args);

// Configure all logs to go to stderr (stdout is used for the MCP protocol messages).
builder.Logging.AddConsole(o => o.LogToStandardErrorThreshold = LogLevel.Trace);

// Add the MCP services: the transport to use (stdio) and the tools to register.
builder.Services
    .AddMcpServer()
    .WithStdioServerTransport()
    .WithToolsFromAssembly();

await builder.Build().RunAsync();

Create KaliLinuxToolset.cs

mkdir -p Tools
touch ./Tools/KaliLinuxToolset.cs

Modify KaliLinuxToolset.cs

using System.ComponentModel;
using System.Diagnostics;
using System.Text;
using ModelContextProtocol.Server;

namespace KaliMCP.Tools;

[McpServerToolType]
public static class KaliLinuxToolset
{
    private const string DefaultImage = "kalilinux/kali-rolling";

    [McpServerTool(Name = "kali-exec"), Description("Runs a shell command inside the Kali Linux Docker image and returns the captured output.")]
    public static async Task<string> RunCommandAsync(
        [Description("The shell command t

... [View full README on GitHub](https://github.com/timsonner/dotnet-docker-kali-mcp-server#readme)