CyberChef

Exposes CyberChef operations as MCP tools to enable AI assistants to perform data transformations and analysis.

javascript

1

GitHub Stars

javascript

Language

6 months ago

First Indexed

2 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "doublegate-cyberchef-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "cyberchef-mcp"
      ]
    }
  }
}

You run a server that exposes CyberChef’s 300+ data manipulation operations as MCP tools so AI assistants can perform complex, multi-step transformations directly through natural language intents without custom glue code.

How to use

Once your CyberChef MCP Server is running, you connect your MCP client to the stdio-based interface. The server exposes a rich set of tools, including the Omni-tool that can execute an entire CyberChef recipe and a broad collection of single-operation tools like base64 encode/decode, AES decrypt, SHA2, YARA rules, and more. You can also use the search tool to discover available operations and their descriptions. Use these tools to translate natural language goals into concrete data transformations without writing your own processing pipelines.

How to install

# Prerequisites: Docker must be installed and running

# Build the MCP Docker image
docker build -f Dockerfile.mcp -t cyberchef-mcp .

# Run the MCP server in interactive stdio mode
docker run -i --rm cyberchef-mcp

Additional notes

This MCP server is designed to be run as a lightweight Docker container based on Alpine Linux and communicates via standard input/output to integrate with MCP clients. It validates inputs against CyberChef’s internal schemas and runs on modern Node.js (v22+). To maximize reliability, ensure Docker is up to date and that you are using a compatible MCP client that supports stdio transport.

Configuration and endpoints

{
  "mcpServers": {
    "cyberchef_mcp": {
      "command": "docker",
      "args": ["run", "-i", "--rm", "cyberchef-mcp"]
    }
  }
}

Troubleshooting tips

If the server does not appear to respond, verify that Docker is running and the image builds successfully. Check for any permission errors in your terminal and confirm that you are using the exact command and arguments shown above. If you need to stop the server, interrupt the process in your MCP client or terminate the Docker container.

Available tools

cyberchef_bake

Executes a full CyberChef recipe on an input, enabling complex, multi-step transformations like Decode Base64 → Gunzip → Pretty-Print JSON.

cyberchef_to_base64

Encodes input to Base64 using CyberChef’s encode operation.

cyberchef_from_base64

Decodes Base64 input back to its original form.

cyberchef_aes_decrypt

Decrypts data using AES with CyberChef’s AES decrypt operation.

cyberchef_sha2

Calculates the SHA-2 family hash of the input data.

cyberchef_yara_rules

Applies YARA rules to identify patterns within the input data.

cyberchef_search

Discovers available CyberChef operations and their descriptions to aid in recipe construction.