Run it in one line
docker run -i --rm ghcr.io/doublegate/cyberchef-mcp_v3:3.1.0Then point any MCP client at it. See the user guide.
CyberChef MCP Server
GCHQ's Cyber Swiss Army Knife, as tools an AI assistant can call — 504 operations for encryption, encoding, compression and forensics.
504 operations, ~24 tools
tools/list is an index by default — about 3,400 tokens rather than 98,000. Every
operation stays reachable through cyberchef_bake and the navigation tools.
Protocol revision 2026-07-28
Served alongside the 2025 era from one set of handlers, on stdio, HTTP and a socket binding. Existing clients are unaffected.
This reference is generated
The tool reference is built from the same
OperationConfig.json the server reads, so it cannot disagree with the running server.