Skip to main content
Glama
DoobyDev

NetSpectre WebMCP Challenge Edition

by DoobyDev

NetSpectre WebMCP Challenge Edition

NetSpectre Challenge Edition is a standalone, browser-based demonstration of human-agent collaboration in a defensive cyber investigation. It was created for the 2026 WebMCP Challenge and uses synthetic data exclusively.

This repository is not the NetSpectre commercial desktop product. It does not contain NetSpectre's private investigation engine, production data, customer information, credentials, or proprietary detection logic.

Live demonstration: https://netspectre-webmcp.stuhall44.chatgpt.site

What the demonstration shows

The included fictional case concerns a supplier-impersonation and payment- diversion attempt. A person and their agent share the same visible case state:

  1. The agent obtains a concise case briefing.

  2. It reviews preserved evidence metadata without opening or executing files.

  3. It explains prioritised signals and their evidence links.

  4. It prepares a finding as a draft.

  5. The investigator explicitly reviews and approves the finding.

  6. The agent generates a summary that reflects the recorded human decision.

Related MCP server: Splunk MCP for SOC Operations

WebMCP tools

Tool

Behaviour

get_case_briefing

Reads the active case, risk, confidence, and state.

list_case_evidence

Reads safe metadata for synthetic evidence.

list_prioritised_signals

Reads explainable signals above an optional confidence threshold.

draft_investigation_finding

Creates a visible draft that still requires human approval.

generate_incident_summary

Reads a summary of the current visible review state.

The app feature-detects document.modelContext.registerTool, so its normal interface continues to work in browsers without WebMCP support.

Safety properties

  • Synthetic evidence only.

  • No live scanning, network requests, shell execution, or arbitrary file access.

  • Evidence metadata is read-only and no suspicious material is executed.

  • Agent-created findings remain drafts until a person approves them visibly.

  • Tool inputs use narrow JSON schemas.

  • Tool activity is reflected in the visible activity record.

  • Outputs support rather than replace professional human judgement.

Run locally

Use Node.js 22.13 or newer.

npm install
npm run dev

Open the printed local URL. For WebMCP discovery, use ChatGPT's built-in browser or a supported Chrome build with WebMCP testing enabled.

Build

npm run build

Challenge work statement

This standalone WebMCP demonstration was created during the WebMCP Challenge submission period. NetSpectre existed previously as a private Windows-first desktop product; judges should evaluate the work in this repository as the new challenge extension and demonstration.

Licence boundary

The MIT licence in this repository applies only to the files contained in this challenge-edition repository. It does not grant rights to the separate NetSpectre commercial desktop application, its private source, data, brands, or other proprietary materials.

Maintenance

ActivityMaintained
ResponsivenessSyncing

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    B
    maintenance
    Brings interactive blue-team security operations into AI hosts, enabling alert triage, attack discovery, case management, detection rules, threat hunting, and sample data generation with rich inline UIs.
    22
  • A
    license
    B
    quality
    D
    maintenance
    Enables AI-driven SOC investigations by providing automated Splunk querying, threat intelligence enrichment, and response actions through natural language. Includes tools for IP pivoting, lateral movement detection, and label harvesting.
    31
    1
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables autonomous SRE incident investigation by allowing users to describe incidents in natural language. The agent follows a governed state machine to gather read-only evidence and produce grounded conclusions.
    MIT

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/DoobyDev/NetSpectre-WebMCP-Challenge'

If you have feedback or need assistance with the MCP directory API, please join our Discord server