I
io.github.bx33661/wireshark-mcp
wireshark-mcp
Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
1 open CVE
MIT license
Actively maintained
Last commit 11d ago
Works with most clients
Transport: stdio, sse, http
2 tools · ~100 tok
Grade A · 0.1% of 200K ctx
MCPpedia last refreshed this data
This server has been archived and is no longer actively maintained.
io.github.bx33661/wireshark-mcp is an MCP server that professional network analysis with tshark. Security audits, deep-dives, and threat detection. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 72/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"io-github-bx33661-wireshark-mcp": {
"args": [
"wireshark-mcp"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/io-github-bx33661-wireshark-mcp)
Read me
What io.github.bx33661/wireshark-mcp does
Drop a .pcap file, ask questions in plain English — get answers backed by real tshark data.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
uvx 'wireshark-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
72/100across 5 weighted dimensions
0255075100
24
20
15
10
−28
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev1 open
CVE-2026-43901mediumCVSS 6.8
wireshark-mcp vulnerable to arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configured
## Description ### Impact `wireshark-mcp` exposes a `wireshark_export_objects` MCP tool that accepts an attacker-controlled `dest_dir` parameter and passes it to tshark's `--export-objects` flag with **no mandatory path restriction**. The path sandbox (`_allowed_dirs`) is `None` by default and only activates when the environment variable `WIRESHARK_MCP_ALLOWED_DIRS` is explicitly set. In a default installation, any directory on the filesystem can be used as the export destination. **Affected
Affected:
>= 0source →Inventory
Tools (2)
Click any tool to inspect its schema.
~100 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is io.github.bx33661/wireshark-mcp safe to use?
- io.github.bx33661/wireshark-mcp has 2 known CVEs tracked by MCPpedia. You can verify these on OSV.dev by searching for "wireshark-mcp". Review the Security section above for details before installing.
- How do I install io.github.bx33661/wireshark-mcp?
- io.github.bx33661/wireshark-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can io.github.bx33661/wireshark-mcp do?
- io.github.bx33661/wireshark-mcp provides 2 tools: wireshark_extract_dns_queries, wireshark_check_threats. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with io.github.bx33661/wireshark-mcp?
- io.github.bx33661/wireshark-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is io.github.bx33661/wireshark-mcp actively maintained?
- io.github.bx33661/wireshark-mcp is actively maintained — last commit was 11 days ago. It has 212 GitHub stars.
Related
Similar servers
Others in security / devops
G
Mcp Gitlab96MCP server for using the GitLab API
1.9k 12
I
io.github.KryptosAI/mcp-observatory94Regression testing for MCP servers. Checks capabilities, invokes tools, detects schema drift.
158 4
K
Komodo MCP Server93MCP server for Komodo - manage Docker containers, servers, stacks, and deployments via AI
19 11
Tachyon93💫 Tachyon MCP Runtime for Java and Kotlin - Model Context Protocol (MCP) server with Streamable HTTP, native Netty transports, tools, tasks, resources, prompts, completions, resumable sessions, and stateless deployment support.
30 6
MCP Security Weekly
Get CVE alerts and security updates for io.github.bx33661/wireshark-mcp and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.