Best Wireshark MCP Servers

Wireshark is a network protocol analyzer that allows users to capture and examine data traveling across a network. It's widely used for network troubleshooting, analysis, software development, and education.

View all Wireshark MCP Servers

Why this server?
Performs deep packet inspection and network forensics on PCAP files, including protocol analysis and credential extraction using TShark.
operant-mcpofficial
Penetration Testing Security Testing & QA Tools
operantlabs
A
license
A
quality
D
maintenance
A comprehensive security testing MCP server providing 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. It enables automated security audits and technical investigations across web applications, cloud environments, and network captures.
Last updated 2026-04-01
51
31
11
MIT
Why this server?
Leverages Wireshark's tshark tool to capture and analyze live network traffic, providing packet-level data, protocol statistics, conversation tracking, and credential extraction capabilities for network diagnostics and security analysis.
WireMCP
Security Monitoring Autonomous Agents
0xKoda
A
license
B
quality
F
maintenance
A Model Context Protocol server that provides LLMs with real-time network traffic analysis capabilities, enabling tasks like threat hunting, network diagnostics, and anomaly detection through Wireshark's tshark.
Last updated 2025-07-09
7
513
MIT
Why this server?
Provides tools for loading and analyzing PCAP/PCAPNG files using Wireshark's sharkd, enabling AI agents to inspect network packets, conversations, protocol statistics, and more.
SharkMCP
Networking & Infrastructure Observability
weirdmachine64
A
license
B
quality
B
maintenance
Enables LLMs to load and analyze PCAP/PCAPNG files using Wireshark's sharkd interface, supporting packet inspection, traffic structure, conversations, and protocol statistics through natural language.
Last updated 2026-04-28
30
69
MIT
Why this server?
Provides network packet capture analysis capabilities similar to Wireshark's capinfos utility, enabling analysis of PCAP files for DNS, DHCP, ICMP, and TCP protocols with metadata extraction and packet statistics.
mcpacket
Security Monitoring
mcpcap
A
license
A
quality
D
maintenance
Enables LLMs to analyze network packet captures (PCAP files) from local or remote sources through a modular architecture. Supports DNS traffic analysis with structured JSON responses for network security and troubleshooting tasks.
Last updated 2026-05-13
9
44
Why this server?
Provides tools for analyzing network traffic and pcap files, including packet summarization, deep packet dissection, stream reassembly, and automated extraction of HTTP requests, DNS queries, and credentials.
Wireshark MCP
Security Monitoring Observability
bx33661
A
license
B
quality
C
maintenance
An MCP server that enables LLMs to analyze pcap files by providing tools for packet dissection, stream following, and data extraction via tshark. It supports protocol hierarchy analysis, credential scanning, and threat intelligence checks on captured network traffic.
Last updated 2026-07-02
47
160
MIT
Why this server?
Provides tools for analyzing packet captures, including reading pcap files, applying display filters, following TCP/UDP streams, summarizing traffic, decoding protocols, and capturing live traffic via tshark.
mcp-wireshark
Networking & Infrastructure Observability
khuynh22
A
license
A
quality
A
maintenance
Enables AI assistants to analyze, filter, and capture network traffic using Wireshark/tshark, allowing natural language interaction with packet captures.
Last updated 2026-07-02
13
43
MIT
Why this server?
Provides network packet analysis capabilities via Wireshark/tshark, including live packet capture, PCAP analysis, protocol statistics, stream reconstruction, file extraction, credential extraction, and HTTP object export.
Wireshark MCP Server
Networking & Infrastructure Penetration Testing
schwarztim
A
license
A
quality
F
maintenance
A Model Context Protocol server that enables AI assistants to perform network packet analysis, capture, and security operations on a remote machine via Wireshark/tshark.
Last updated 2026-05-09
10
1
MIT
Why this server?
Provides packet capture, deep protocol analysis, stream reconstruction, expert info, TLS decryption, and traffic export using Wireshark/TShark.
NetMCP
Networking & Infrastructure Security Penetration Testing
cortexc0de
A
license
B
quality
C
maintenance
A professional-grade network analysis MCP server that integrates Wireshark/TShark, Nmap, and threat intelligence to enable packet capture, network scanning, threat detection, and credential extraction through natural language.
Last updated 2026-04-03
41
2
MIT
Why this server?
Enables packet capture and analysis through Wireshark/tshark integration, allowing the agent to start recording network traffic, analyze packet contents, apply filters, decrypt SSL/TLS traffic, and troubleshoot network issues
SharkMCP
Security Monitoring
tuliperis
A
license
A
quality
D
maintenance
A Model Context Protocol server that provides network packet capture and analysis capabilities through Wireshark/tshark integration, enabling AI assistants to perform network security analysis and troubleshooting.
Last updated 2025-06-14
4
35
MIT

operant-mcpofficial