How do I install Tshark?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Tshark need an API key?

The publisher lists these environment variables: TSHARK_MCP_ALLOW_DIRS, TSHARK_MCP_TSHARK, TSHARK_MCP_REDACT, TSHARK_MCP_EXPORT_DIR.

What transport does Tshark use?

Tshark runs locally over stdio.

When was Tshark last checked?

Last checked 2026-11-09. Read-only packet capture analysis with tshark: Diameter, GTP, SIP, RTP, SIGTRAN, DNS, TCP and TLS.

Tshark MCP server

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Add to Cursor Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Local command

uvx tshark-mcp-server==0.2.0

Credentials from the publisher

TSHARK_MCP_ALLOW_DIRS — Directories the server may read captures from, colon-separated. Required: the server refuses to start without one.
TSHARK_MCP_TSHARK — Path to the tshark binary (4.0 or newer) when it is not on PATH.
TSHARK_MCP_REDACT — Pseudonymise identifiers in every result: ids (IMSI, MSISDN, IMEI, SIP users, UE IPs) or ids+ips (every IP too).
TSHARK_MCP_EXPORT_DIR — Turns on export_subset: the one directory it may write new pcapng files to. Must not overlap an allowed dir. Unset: the server writes nothing.

Claude Code has no install link for a local command. Copy the command below and run it in a terminal.

shClaude Code

1TSHARK_MCP_ALLOW_DIRS=<value> TSHARK_MCP_TSHARK=<value> TSHARK_MCP_REDACT=<value> TSHARK_MCP_EXPORT_DIR=<value> claude mcp add io.github.kx96xx-tshark-mcp -- uvx tshark-mcp-server==0.2.0

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "io.github.kx96xx-tshark-mcp": {4      "command": "uvx",5      "args": [6        "tshark-mcp-server==0.2.0"7      ],8      "env": {9        "TSHARK_MCP_ALLOW_DIRS": "<value>",10        "TSHARK_MCP_TSHARK": "<value>",11        "TSHARK_MCP_REDACT": "<value>",12        "TSHARK_MCP_EXPORT_DIR": "<value>"13      }14    }15  }16}

claude_desktop_config.json

Local · pypiPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Local

Transport: stdio
Version

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Tshark

Add this server

Host a copy with our keys and logs.

Server facts

Tools

Questions

How do I install Tshark?

Does Tshark need an API key?

What transport does Tshark use?

When was Tshark last checked?

Documentation