cyberchef-mcp — Claude Code MCP server: features and setup
Connects an AI agent to CyberChef operations through MCP. Use it to transform data, encode content, or run digital-forensics tasks.
claude mcp add cyberchef-mcp -- npx -y cyberchef-mcpWhat cyberchef-mcp does
The server exposes 504 CyberChef operations as MCP tools. An agent can use them for data processing such as encryption, encoding, compression, and digital forensics. It wraps CyberChef’s Node.js API; the web interface has been removed from this fork.
For Claude Code, start the server with npx using the command below. OAuth 2.1 and tenant isolation are available for HTTP deployments, but need configuration; OAuth is off by default. The usual stdio setup in Claude Code does not require an API key.
What it helps with
- decode a string or transform data
- encrypt data with a CyberChef operation
- compress data before passing it on
- inspect data for digital-forensics clues
Example prompts for the agent
- Decode this string and explain the result.
- Encrypt this data with CyberChef.
- Inspect this file for details relevant to digital forensics.
How to install cyberchef-mcp
Platform CLI
claude mcp add cyberchef-mcp -- npx -y cyberchef-mcpPlatform CLI
codex mcp add cyberchef-mcp -- npx -y cyberchef-mcpConfig file
{
"mcpServers": {
"cyberchef-mcp": {
"command": "npx",
"args": [
"-y",
"cyberchef-mcp"
]
}
}
}Config file
{
"servers": {
"cyberchef-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"cyberchef-mcp"
]
}
}
}Platform CLI
gemini mcp add cyberchef-mcp npx -y cyberchef-mcpStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about cyberchef-mcp
How do I install cyberchef-mcp in Claude Code?
Run claude mcp add cyberchef-mcp -- npx -y cyberchef-mcp.
What does cyberchef-mcp do?
It makes 504 CyberChef operations available to an agent as MCP tools, including operations for encryption, encoding, and compression.
Do I need an API key to run it?
The Claude Code stdio setup starts it with npx. OAuth applies to HTTP mode and is enabled by setting CYBERCHEF_AUTH_ISSUER.
