Question 1

What is this server?

Accepted Answer

It’s a devkit MCP server that wraps 38 Kali Linux tools and provides a structured interface for LLM-driven penetration testing. It replaces an earlier Flask-based V1 with a single FastMCP server.

Question 2

Do I need to install Kali tools separately?

Accepted Answer

If using the Docker image, all 38 tools are pre-installed. For local installation, the underlying tools must be available on the host.

Question 3

How does scope enforcement work?

Accepted Answer

You supply a YAML file with allowed CIDRs, domains, and optional tool restrictions. Every tool call validates its target against this scope; out‑of‑scope targets are rejected.

Question 4

What credentials does it need?

Accepted Answer

It reads `ASTRO_HOST`, `ASTRO_DB_PATH` from the environment. Store these in your client's env block or a secrets manager — never commit them to a repository — and grant the narrowest scope that still covers your use case.

Variable	Description	Required
ASTRO_HOST	Endpoint or connection string the server talks to.	Optional
ASTRO_DB_PATH	Filesystem location the server is allowed to use.	Optional

For Breaking Shyet MCP Server

What is the For Breaking Shyet MCP Server?

What you get

More MCP options

Configuration

Example prompts to try

Frequently asked questions

Alternatives to the For Breaking Shyet MCP Server

Filesystem

Context7

Tmux MCP

Noun

UnifAPI MCP

Memorybank