Mcpcap MCP Server

An MCP server for analyzing PCAP files.

The short version

A modular Python MCP (Model Context Protocol) server for analyzing PCAP files. mcpcap exposes protocol-specific analysis tools that accept a local file path or remote HTTP URL at call time, so the server stays stateless and works cleanly with MCP clients.

mcpcap uses a modular architecture to analyze different network protocols found in PCAP files. Each module provides specialized analysis tools that can be called independently with any PCAP file, making it perfect for integration with Claude Desktop and other MCP clients.

• Stateless MCP Tools — Each analysis call supplies its own PCAP path or URL
• Modular Architecture — DNS, DHCP, ICMP, TCP, SIP, and CapInfos modules with easy extensibility for new protocols
• Advanced TCP Analysis — Connection lifecycle, traffic patterns, retransmissions, and flow inspection
• Local & Remote PCAP Support — Analyze files from local storage or HTTP URLs
• Scapy Integration — Leverages scapy's comprehensive packet parsing capabilities
• Specialized Analysis Prompts — Security, networking, and forensic analysis guidance

What it needs from you

• Python 3.10+ - scapy (packet parsing and analysis) - requests (remote file access) - fastmcp (MCP server framework)

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.