CyberChef MCP
grunt · by doublegate
CyberChef's 504 data-transformation operations as MCP tools: encryption, encoding, forensics.
No known CVEs
No license
Actively maintained
Last commit 3d ago
Works with most clients
Transport: stdio, sse, http
21 tools · ~1.2k tok
Grade B · 0.6% of 200K ctx
MCPpedia last refreshed this data
CyberChef MCP is an MCP server that CyberChef's 504 data-transformation operations as MCP tools: encryption, encoding, forensics. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 85/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients - only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"cyberchef": {
"args": [
"run",
"-i",
"--rm",
"cyberchef-mcp"
],
"command": "docker"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/cyberchef-mcp)
Read me
What CyberChef MCP does
CyberChef's 504 data-transformation operations as MCP tools: encryption, encoding, forensics.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y 'grunt' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories - click any category to see the underlying evidence.
Score breakdown
85/100across 5 weighted dimensions
0255075100
26
18
16
15
10
−15
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev3 fixed
CVE-2022-1537high · fixedCVSS 7
Race Condition in Grunt
file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. This vulnerability is capable of arbitrary file writes which can lead to local privilege escalation to the GruntJS user if a lower-privileged user has write access to both source and destination directories as the lower-privileged user can create a symlink to the GruntJS user's .bashrc file or replace /etc/shadow file if the GruntJS user is
CVE-2022-0436medium · fixedCVSS 5.5
Path Traversal in Grunt
Grunt prior to version 1.5.2 is vulnerable to path traversal.
CVE-2020-7729high · fixedCVSS 7.1
Arbitrary Code Execution in grunt
The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its secure replacement safeLoad() of the package js-yaml inside grunt.file.readYAML.
Inventory
Tools (21)
Click any tool to inspect its schema.
~1.2k tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is CyberChef MCP safe to use?
- CyberChef MCP has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.
- How do I install CyberChef MCP?
- CyberChef MCP supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can CyberChef MCP do?
- CyberChef MCP provides 21 tools: cyberchef_bake, cyberchef_categories, cyberchef_search, cyberchef_batch, cyberchef_telemetry_export and 16 more. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with CyberChef MCP?
- CyberChef MCP is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is CyberChef MCP actively maintained?
- CyberChef MCP is actively maintained - last commit was 3 days ago. It has 26 GitHub stars.
Related
Similar servers
Others in security / ai-ml
I
io.github.callstack/agent-device96MCP server for mobile app automation: verify, control, and debug iOS, Android, TV, and desktop apps
5.1k 5
I
io.github.HUANGCHIHHUNGLeo/claude-real-video96Let any LLM watch a video locally — and search everything it has ever watched.
2.2k 6
Modelcontextprotocol96The official MCP server implementation for the Perplexity API Platform
2.6k 4
I
io.github.mims-harvard/tooluniverse962,700+ scientific tools for AI scientists: life science, research, literature, and more.
1.8k 4
MCP Security Weekly
Get CVE alerts and security updates for CyberChef MCP and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.