About Framecite
Framecite is an MCP server in the Security category: local, payload-redacted PCAP troubleshooting over MCP with deterministic packet citations—no Wireshark or TShark required.
Install
git clone https://github.com/daniissac/frameciteThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (6)
analyze_dnsCheck response codes, matching responses, retries, and response-time facts; supplied names become session-local tokens.
Parameters not published.
analyze_tcpCheck resets, zero windows, SYN repeats, missing SYN-ACKs, and repeated sequence ranges.
Parameters not published.
inspect_packetsInspect up to 50 explicit 1-based packets using allowlisted headers.
Parameters not published.
list_conversationsList largest-first TCP/UDP conversations with directional packet/byte counts and evidence.
Parameters not published.
open_captureStream one attached or root-confined PCAP/PCAPNG into a bounded, payload-free in-memory model.
Parameters not published.
summarize_captureReturn capture facts plus prioritized capture-health, TCP, DNS, and ICMP path findings.
Parameters not published.
Ask AI
Ask AI about Framecite
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.