mcpcap

Our take

Stateless Python/Scapy MCP server for PCAP analysis with modular protocol coverage (DNS, DHCP, ICMP, TCP, SIP, capinfos) plus security/forensics analysis prompts; accepts local paths or HTTP URLs per call. Clean architecture, pip/uvx/Docker install paths, docs site, maintained since Sep 2025. It parses packets, not judgment — deep analysis still depends on the LLM, and coverage is thin beyond the listed protocols. For network engineers, SOC analysts, and incident responders.

reviewed by hand · 2026-07-05

Something wrong or dead here? Report it

Verification record

last verified

yesterday

github stars

44

last commit

2 mo ago

archived

no

license

MIT

in registry since

2026-03-17

github.com/mcpcap/mcpcap