mcp-shark MCP Server
mcp-shark/mcp-shark
[](https://agentrank-ai.com/tool/mcp-shark--mcp-shark/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) Wireshark-like forensic analysis for Model Context Protocol communications Capture, inspect, and investigate all HTTP requests and responses between your IDE and MCP servers
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
mcp-shark/mcp-shark is a JavaScript MCP server. Wireshark-like forensic analysis for Model Context Protocol communications Capture, inspect, and investigate all HTTP requests and responses between your IDE and MCP servers Topics: electron, forensic-analysis, forensics, forensics-tools, mcp-protocol, monitoring, monitoring-tool, nodejs, security, security-audit, security-tools, traffic-analysis, aauth, ai-agent, ai-agent-tools, ai-agents, ai-tools, authentication.
Ranked #12315 out of 24846 indexed tools.
Ecosystem
Score Breakdown
179 stars → growing community
Last commit 6mo ago → stale
2/2 issues closed → responsive maintainer
1 contributor → solo project
No dependents → no downstream usage
Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →
How to Improve
Badge all embed codes →
[](https://agentrank-ai.com/tool/mcp-shark--mcp-shark/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) <a href="https://agentrank-ai.com/tool/mcp-shark--mcp-shark/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge"><img src="https://agentrank-ai.com/api/v1/badge/mcp-shark--mcp-shark" alt="AgentRank"></a> Matched Queries
From the README
<div align="center">
<h1>mcp-shark</h1>
<div style="text-align: left; max-width: 42rem; margin: 0 auto;">
<p><strong>Security scanner for AI agent tools</strong> — built for security and platform engineers working with MCP in the IDE.</p>
<p>Run a local static <code>scan</code> over MCP <strong>IDE configs</strong> and embedded tool metadata: <strong>41 rules</strong> (including <strong>AAuth visibility</strong>), toxic-flow heuristics, and <strong>SARIF</strong> / <strong>HTML</strong> / <strong>JSON</strong> reports. There is no hosted config-scan backend.</p>
<p>Add an optional <strong>local HTTP proxy</strong> with an <strong>in-browser dashboard</strong> so live traffic, findings, AAuth signals, and playground checks stay in one place—without sending your configs to a vendor.</p>
<p><strong>You can</strong></p>
<ul style="margin: 0.35rem 0 0.75rem; padding-left: 1.25rem;">
<li>Use <strong>Traffic</strong> for live JSON-RPC capture, filters, expo Read full README on GitHub → Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.