Skip to content
Grok

tshark-mcp for Grok

io.github.kx96xx/tshark-mcp

Read-only packet capture analysis with tshark: Diameter, GTP, SIP, RTP, SIGTRAN, DNS, TCP and TLS.

client:Grok transport:stdio runtime:pypi

Install tshark-mcp in Grok

.mcp.json (in your project root)

Held in this page only — never stored, logged, or sent anywhere but back to your screen.

{
  "mcpServers": {
    "tshark-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "tshark-mcp-server"
      ],
      "env": {
        "TSHARK_MCP_ALLOW_DIRS": "<TSHARK_MCP_ALLOW_DIRS>",
        "TSHARK_MCP_TSHARK": "<TSHARK_MCP_TSHARK>",
        "TSHARK_MCP_REDACT": "<TSHARK_MCP_REDACT>",
        "TSHARK_MCP_EXPORT_DIR": "<TSHARK_MCP_EXPORT_DIR>"
      }
    }
  }
}

Grok Build reads Claude Code's .mcp.json and Claude Desktop's config unchanged, so a server you have already set up there needs nothing new. The Grok web app and X integration do not take custom servers. Grok docs

tshark-mcp in other clients