Packet capture and analysis for AI agents via the Model Context Protocol (MCP).
Wireshark MCP Server is an MCP project maintained in the a-g-u-p-t-a/wireshark-mcp repository. The maintainer describes its purpose as “Packet capture and analysis for AI agents via the Model Context Protocol (MCP)”. Read the project documentation for the complete scope.
The project provides a local client configuration using /absolute/path/to/.venv/bin/python. Follow the repository’s build and installation steps before copying it, and replace example paths with the paths on your own computer.
The example declares TSHARK_PATH. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| Area | Tools |
| Setup | check_environment, configure_tshark |
| Capture | list_interfaces, quick_capture, capture_live_packets, save_capture_to_file |
| Analysis | read_pcap_file, analyze_traffic, deep_packet_analysis, quick_traffic_analysis |
| Diagnostics | protocol_hierarchy_statistics, expert_information, filtered_packet_display |
{
"mcpServers": {
"wireshark": {
"command": "/absolute/path/to/.venv/bin/python",
"args": [
"-m",
"wireshark_mcp"
],
"env": {
"TSHARK_PATH": "/absolute/path/to/tshark"
}
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
| Variable | Description | Required |
|---|---|---|
| TSHARK_PATH | Declared in the maintainer’s client configuration. | Check documentation |
Provides IP address geolocation data via IP-API.com without requiring an API key.
Free web lookups; PDF to Markdown, audio transcripts, screenshots, WHOIS/DNS paid per call via x402.
"It's like gmail for your coding agents!"
Pay-per-call web extract, DNS/WHOIS/IP lookup, PDF/RSS/sitemap tools. x402 USDC on Base/Algorand.
Pay-per-call DNS, WHOIS/RDAP, IP and domain reports for agents. x402 USDC on Base or Algorand.
Security intelligence via x402 on Base. CVE lookup, IP reputation, secret scanning.