Wireshark MCP Server: Install & Setup

Install Wireshark in Claude Code

Claude Code

claude mcp add wireshark -- uvx wireshark-mcp

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "wireshark": {
      "command": "uvx",
      "args": [
        "wireshark-mcp"
      ]
    }
  }
}

Frequently asked questions

What does the Wireshark MCP server do?

Wireshark packet analysis: capture, protocol statistics, field extraction and security analysis.

Is the Wireshark MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does Wireshark run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add Wireshark to Claude Code?

Run: claude mcp add wireshark -- uvx wireshark-mcp

More security & identity MCP servers

View all

Radare2

340

radareorg/radare2-mcp

Disassemble and inspect binaries for reverse engineering with the Radare2 disassembler.

LocalFreeC/C++

Binary Ninja

456

fosdickio/binary_ninja_mcp

Binary Ninja plugin and bridge for automating binary analysis and reverse engineering.

LocalFreePython

DashClaw

314

ucsandman/DashClaw

Fail-closed approval layer for unattended agent runs: checks actions against org policy, requests human approval and logs every decision to a causal ledger.

LocalAccount neededTypeScript

Emilia Protocol

601

emiliaprotocol/emilia-protocol

Requires a named human's approval before irreversible agent actions such as payments or deploys, then issues an offline-verifiable Ed25519 trust receipt.

LocalFreeTypeScript

squirrelscan

301

squirrelscan/squirrelscan

Website QA for your coding agent: audit SEO, performance, security, accessibility over MCP.

RemoteAccount needed

Apktool

699

zinja-coder/apktool-mcp-server

Automate reverse engineering of Android APKs with Apktool.

LocalFreePython