Advertise
MCP.so
Sign In

Sharkmcp MCP Server

@kriztalz

Repository

Basic information

Category

Other

Last updated

Transports

stdio

Author

kriztalz

Submitted by

FS

About Sharkmcp MCP Server

A tshark MCP server for packet capture and analysis

#wireshark#shark#tshark#pcap#pcapng#packet#monitoring

Sharkmcp MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "sharkmcp": {
      "command": "node",
      "args": [
        "/path/to/SharkMCP/dist/index.js"
      ]
    }
  }
}

Sharkmcp MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is SharkMCP?

SharkMCP is a Model Context Protocol (MCP) server that provides network packet capture and analysis capabilities through Wireshark/tshark integration. It is designed for AI assistants to perform network security analysis, troubleshooting, and packet inspection, particularly for debugging applications by recording traffic during test runs.

How to use SharkMCP?

Install by cloning the repository, then run pnpm install and pnpm run build. Start the server with pnpm start and configure your MCP client with the server command pointing to the built index.js. Use the tools start_capture_session, stop_capture_session, analyze_pcap_file, and manage_config to capture, analyze, and manage packet traffic.

Key features of SharkMCP

  • Async background packet capture with filters and timeouts
  • Analyze existing PCAP files
  • Flexible output: JSON, custom fields, or text
  • SSL/TLS decryption via SSL keylog files
  • Reusable capture and analysis configurations

Use cases of SharkMCP

  • Debugging a program by recording and inspecting its network traffic
  • Network security analysis and intrusion detection
  • Troubleshooting connectivity and protocol issues
  • Monitoring HTTPS traffic with SSL keylog decryption

Frequently asked questions

1

What are the system prerequisites?

Node.js version 18+, pnpm, and a working installation of Wireshark/tshark that is accessible from the command line.

2

How do I fix "tshark not found"?

Ensure Wireshark is installed and that `tshark` is in your system PATH; verify with `tshark -v`.

3

What should I do if I get "permission denied" for packet capture?

On Linux, add your user to the `wireshark` group or run with `sudo`. On macOS, grant Terminal network access in System Preferences. On Windows, run the application as Administrator.

4

How can I decrypt HTTPS traffic?

Set the environment variable `SSLKEYLOGFILE` to a file path, configure your applications to log SSL keys there, then pass that file path to the `stop_capture_session` tool.

5

What output formats does SharkMCP support?

It supports JSON, custom fields, and traditional text output, selectable via the `outputFormat` parameter in capture tools.

Comments

More Other MCP servers

Sequential Thinking

modelcontextprotocol

Model Context Protocol Servers

88.2K

YOUB

Connect your AI assistant to your own YOUB endurance training account. Read recorded activities with full analysis, planned sessions, race goals, wellness (HRV, sleep, resting HR) and your athletic profile. Create or mov

Lemon.io

lemon-io

Request dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3

Reactive Resume

amruthpillai

A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!

39.5K

CryptoAd Network

CryptoAdvertisingNet

Agent-native crypto ads: reach real crypto users from $0.05, paid in USDC via x402. No account.

Advertise