NetSpectre WebMCP Challenge Edition
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@NetSpectre WebMCP Challenge EditionGet the case briefing and list the top prioritized signals."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
NetSpectre WebMCP Challenge Edition
NetSpectre Challenge Edition is a standalone, browser-based demonstration of human-agent collaboration in a defensive cyber investigation. It was created for the 2026 WebMCP Challenge and uses synthetic data exclusively.
This repository is not the NetSpectre commercial desktop product. It does not contain NetSpectre's private investigation engine, production data, customer information, credentials, or proprietary detection logic.
Live demonstration: https://netspectre-webmcp.stuhall44.chatgpt.site
What the demonstration shows
The included fictional case concerns a supplier-impersonation and payment- diversion attempt. A person and their agent share the same visible case state:
The agent obtains a concise case briefing.
It reviews preserved evidence metadata without opening or executing files.
It explains prioritised signals and their evidence links.
It prepares a finding as a draft.
The investigator explicitly reviews and approves the finding.
The agent generates a summary that reflects the recorded human decision.
Related MCP server: Splunk MCP for SOC Operations
WebMCP tools
Tool | Behaviour |
| Reads the active case, risk, confidence, and state. |
| Reads safe metadata for synthetic evidence. |
| Reads explainable signals above an optional confidence threshold. |
| Creates a visible draft that still requires human approval. |
| Reads a summary of the current visible review state. |
The app feature-detects document.modelContext.registerTool, so its normal
interface continues to work in browsers without WebMCP support.
Safety properties
Synthetic evidence only.
No live scanning, network requests, shell execution, or arbitrary file access.
Evidence metadata is read-only and no suspicious material is executed.
Agent-created findings remain drafts until a person approves them visibly.
Tool inputs use narrow JSON schemas.
Tool activity is reflected in the visible activity record.
Outputs support rather than replace professional human judgement.
Run locally
Use Node.js 22.13 or newer.
npm install
npm run devOpen the printed local URL. For WebMCP discovery, use ChatGPT's built-in browser or a supported Chrome build with WebMCP testing enabled.
Build
npm run buildChallenge work statement
This standalone WebMCP demonstration was created during the WebMCP Challenge submission period. NetSpectre existed previously as a private Windows-first desktop product; judges should evaluate the work in this repository as the new challenge extension and demonstration.
Licence boundary
The MIT licence in this repository applies only to the files contained in this challenge-edition repository. It does not grant rights to the separate NetSpectre commercial desktop application, its private source, data, brands, or other proprietary materials.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Human-in-the-loop review and approval for AI agents. Audit trail, approval policies, native MCP.
Task and planning workspace for humans collaborating with AI agents
Coordination hub for AI coding agents: message teammates, ask humans, audit every event.
Multi-expert decision intelligence with transparent synthesis and auditable workflows.
Related MCP Servers
FlicenseNot gradedqualityBmaintenanceBrings interactive blue-team security operations into AI hosts, enabling alert triage, attack discovery, case management, detection rules, threat hunting, and sample data generation with rich inline UIs.22- AlicenseBqualityDmaintenanceEnables AI-driven SOC investigations by providing automated Splunk querying, threat intelligence enrichment, and response actions through natural language. Includes tools for IP pivoting, lateral movement detection, and label harvesting.311Apache 2.0
- AlicenseNot gradedqualityBmaintenanceEnables autonomous SRE incident investigation by allowing users to describe incidents in natural language. The agent follows a governed state machine to gather read-only evidence and produce grounded conclusions.MIT
- AlicenseNot gradedqualityAmaintenanceAuditable records of human decisions over AI agent work. Approvals, edits, overrides, escalations.80Apache 2.0
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/DoobyDev/NetSpectre-WebMCP-Challenge'
If you have feedback or need assistance with the MCP directory API, please join our Discord server