wireshark-mcp
local MCP serverwireshark-mcp is a local MCP server: Professional network analysis with tshark. Security audits, deep-dives, and threat detection. Install it from pypi as wireshark-mcp.
Installation
Terminal
claude mcp add wireshark-mcp -- uvx wireshark-mcp
Run in your project folder. Add --scope user to use it everywhere.
Claude Desktop, Cursor & other clients
Add to claude_desktop_config.json or .cursor/mcp.json.
{
"mcpServers": {
"wireshark-mcp": {
"command": "uvx",
"args": [
"wireshark-mcp"
]
}
}
}What you need
- Runtime: Python with uv (runs with uvx).
- MCP client: Claude Code, Codex, Antigravity, Claude Desktop, Cursor or any other client that speaks MCP over stdio.
Summary
Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
wireshark-mcp vs similar servers
| Server | Stars | Type | API key | Runtime |
|---|---|---|---|---|
| wireshark-mcp | 273 | Local | No | pypi |
| mcp | 12K | Local | No | mcpb |
| jshookmcp | 2,021 | Local | No | npm |
| AutoTS | 1,429 | Local | No | pypi |
| skylos | 838 | Local | Yes | pypi |
Questions
No. The registry entry lists no keys or environment variables.
Python with uv (runs with uvx), plus an MCP client such as Claude Code, Codex, Claude Desktop or Cursor.
wireshark-mcp is a local MCP server distributed as the pypi package wireshark-mcp.
Run: claude mcp add wireshark-mcp -- uvx wireshark-mcp
Run: codex mcp add wireshark-mcp -- uvx wireshark-mcp
Similar MCP servers
NameStars
- mcpio.github.kubeshark/mcp12K
- jshookmcpio.github.vmoranv/jshookmcp2,021
- AutoTSio.github.winedarksea/AutoTS1,429
- skylosio.github.duriantaco/skylos838
- CrowdStrike Falcon MCP Serverio.github.CrowdStrike/falcon-mcp258
- crowdsentinel-mcp-serverio.github.thomasxm/crowdsentinel-mcp-server206
- Reversecore MCPio.github.sjkim1127/reversecore-mcp205
- virustotalio.github.BurtTheCoder/virustotal149