// MCP TOOL REFERENCE

WIREMCP TOOLS

7 tools from the WireMCP MCP Server, categorised by risk level.

View the WireMCP policy →
// ALL 7 WIREMCP TOOLS
READ 5 tools
Read analyze_pcap Analyze a PCAP file and provide general packet data as JSON for LLM analysis Read check_ip_threats Check a given IP address against URLhaus blacklist for IOCs Read check_threats Capture live traffic and check IPs against URLhaus blacklist Read extract_credentials Extract potential credentials (HTTP Basic Auth, FTP, Telnet) from a PCAP file for LLM analysis Read get_conversations Capture live traffic and provide TCP/UDP conversation statistics for LLM analysis
EXECUTE 2 tools
Execute capture_packets Capture live traffic and provide raw packet data as JSON for LLM analysis Execute get_summary_stats Capture live traffic and provide protocol hierarchy statistics for LLM analysis

Route WireMCP through PolicyLayer and every one of its 7 tools is checked against your policy before it runs.

GOVERN WIREMCP →

Enforced before the call runs. Nothing to install.

// FAQ
How many tools does the WireMCP MCP server have? +

The WireMCP MCP server exposes 7 tools across 2 categories: Read, Execute.

How do I enforce policies on WireMCP tools? +

Route the WireMCP server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard; they are enforced on every call before it reaches the server.

What risk categories do WireMCP tools fall into? +

WireMCP tools are categorised as Read (5), Execute (2). Each category has a recommended default policy.

Enforce policy on every WireMCP tool call.

Deterministic rules across all 7 WireMCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

GOVERN WIREMCP →

Free to start. No card required.

42,500+ MCP servers and 110,000+ tools scanned and risk-classified.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.