Wireshark MCP plugin for Grok Build

Community Claude Code plugin, installs in GrokPluginSecurity

Wireshark-MCP,Give your AI assistant a packet analyzer. Drop a .pcap file, ask questions in plain English — get answers backed by real tshark data.

How to install Wireshark MCP in Grok Build

grok plugin install bx33661/Wireshark-MCP --trust

Review before you trust it. --trust lets this plugin's hooks, MCP servers and scripts run code on your computer. It's a community repo that neither xAI nor GrokStacks has reviewed, so read its code first.

We install this repo directly: Grok Build 1.0.62 can't install it through its own marketplace file. Then start a new Grok session, or press r in /plugins, to load it.

Command format: Grok Build's plugin guide

Runs a local MCP server (with npx, uvx or similar), so that tool needs to be installed, for example Node.js for npx.

What we checked: on Oct 18, 2026 it installed with grok 1.0.62 and Grok found 2 skills. That's an install check only: we haven't run it in a live Grok session.

New Grok Build plugins every Tuesday, install line ready to copy.

Stacks Weekly is one short email from GrokStacks and CodexStacks. Subscribe and get the free starter list: 20 Grok Build plugins worth installing first.

Confirmation email first. Unsubscribe anytime.

What it contains

Skills (2)

  • tshark-cli-analysis — Use TShark directly for offline packet analysis, live capture, filters, protocol dissection and decryption, statistics, stream following, exports, and Lua/extcap workflows. Activate for terminal-based Wireshark work; use wireshark-traffic-a
  • wireshark-traffic-analysis — Investigate pcap/pcapng captures through Wireshark MCP for traffic questions, network troubleshooting, and evidence-backed security analysis. Use when MCP tools are the selected backend; use tshark-cli-analysis for direct terminal execution

MCP servers (1)

  • wireshark-mcp — stdio server

About this listing

Wireshark MCP is a community plugin on GitHub by bx33661, written as a Claude Code plugin that Grok Build installs. We install-checked it in Grok; we haven't run it in a live session or reviewed its code. When we installed it, Grok found 2 skills, 1 MCP server. Its license is MIT. We checked commit 0e1b6595a2dc. It's one of 79 listings in the Security category on GrokStacks.

Wireshark MCP FAQ

How do I install Wireshark MCP in Grok Build?

Run grok plugin install bx33661/Wireshark-MCP --trust. We install-checked this command in Grok Build. We install this repo directly: Grok Build 1.0.62 can't install it through its own marketplace file. Then start a new Grok session, or press r in /plugins, to load it.

Is Wireshark MCP an official Grok Build plugin?

No. Wireshark MCP is a community plugin on GitHub by bx33661, not in xAI's official Grok Build marketplace. We checked that it installs and what Grok loads from it, but haven't run it in a live Grok session or reviewed its code.

What does Wireshark MCP include?

According to what Grok loaded in our install check, Wireshark MCP includes 2 skills, 1 MCP server: tshark-cli-analysis, wireshark-traffic-analysis, wireshark-mcp.

Details

Type
Plugin
Category
Security
Source
Community Claude Code plugin, installs in Grok
License
MIT
Author
bx33661
Version
3.1.0
Keywords
ai-agents, mcp, network-security, packet-analysis, pcap, tshark, wireshark
Source repo
https://github.com/bx33661/Wireshark-MCP
Checked commit
0e1b6595a2dc
Checked by GrokStacks
Install-checked in Grok Build on Oct 18, 2026; not run in a live session

Something wrong or missing? Submit or improve this listing. Marketplace listings also refresh automatically every night.

For maintainers: badge and embeds

Maintain Wireshark MCP? Add the badge; it links to this page.

Listed on GrokStacks

Markdown

[![Listed on GrokStacks](https://grokstacks.com/badge.svg)](https://grokstacks.com/p/wireshark-mcp/)

HTML

<a href="https://grokstacks.com/p/wireshark-mcp/"><img src="https://grokstacks.com/badge.svg" alt="Listed on GrokStacks" width="164" height="28"></a>

Embed card (static HTML and inline CSS, no JavaScript). Preview:

<a href="https://grokstacks.com/p/wireshark-mcp/" style="display:block;max-width:380px;box-sizing:border-box;padding:14px 16px;border:1px solid #2a2e3c;border-radius:12px;background:#0a0b0f;color:#e8eaf0;font:14px/1.45 -apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;text-decoration:none"><span style="display:block;font-size:16px;font-weight:700;color:#e8eaf0">Wireshark MCP</span><span style="display:block;margin:2px 0 8px;font-size:12px;color:#9aa0b1">Community plugin for Grok Build · 2 skills, 1 MCP server</span><span style="display:block;margin:0 0 10px;color:#c9cdd8">Wireshark-MCP,Give your AI assistant a packet analyzer. Drop a .pcap file, ask questions in plain English — get…</span><span style="font-size:12px;font-weight:600;color:#7c9cff">View on GrokStacks →</span></a>

Markdown summary

**[Wireshark MCP on GrokStacks](https://grokstacks.com/p/wireshark-mcp/)**: Community plugin for Grok Build with 2 skills, 1 MCP server. Install: `grok plugin install bx33661/Wireshark-MCP --trust`

More on badges, embeds and keeping your listing up to date: GrokStacks for plugin authors.

Also in Security

All 79 security listings →