CYBERCHEF MCP
Glama Smithery ★ GitHub Install MCP
Botanical Cyber Art
Deterministic Cryptography & Payload Forensics

The cryptographic engine
for autonomous agents.

Deobfuscate, decrypt, and inspect security payloads in sub-milliseconds. Give your AI coding and pentesting agents a zero-dependency cryptographic core.

Install MCP Server Glama Listing ↗ Explore the tools
Guided setup · Claude Code, Cursor & Windsurf
$ npx @noorfatima123456/cyber-chef-mcp --guided
Install CyberChef MCP in your coding tool
Claude Code
Codex
Cursor
OpenCode
Kimi Code
Strix
GitHub
28
Core operations · 100% Zero-dep ↗
< 0.05ms
Execution latency · Instant bakes ↘
100%
ReDoS immune · Deterministic AST ↗
0
Crash rate · 100 fuzz passes ↗
Zero-Latency Deobfuscation

Live In-Browser Sandbox

Experience deterministic deobfuscation in real time. Runs locally in your browser with identical logic to the MCP server.

0.04 ms
Instant Integration

Connect in One Step

Connect CyberChef MCP to Claude Desktop, Cursor, Windsurf, or Strix Pentesting Framework.


        

      

    


    
    

      
Enterprise Capability Catalog

      
28 Deterministic Operations

      
Every operation executes natively in linear time O(n) with zero external dependencies and guaranteed ReDoS immunity.

    


    

      

        

          Base64 & Hex Codecs
          RFC 4648
        

        
Structured decoding distinguishing printable strings from raw binary bytes. Guarantees 0% mojibake text corruption.

      


      

        

          Shannon Entropy
          Forensics
        

        
Calibrated against theoretical alphabet maxes (Hex: 4.0, Base64: 6.0, Byte: 8.0) with saturation ratios and total bit counts.

      


      

        

          Scoped Defang & Refang
          Defense
        

        
Neutralizes malicious URLs, hostnames, and IP addresses while strictly preserving legitimate decimal paths and query strings.

      


      

        

          Enterprise DLP Scanner
          Compliance
        

        
Redacts and scores high-confidence credit cards (Luhn check), SSNs, IBANs, phone numbers, and strict IPv4/IPv6 addresses.

      


      

        

          PHC Argon2 / Modern Hash
          Security
        

        
Parses PHC-compliant Argon2id/i/d, scrypt, PBKDF2, and bcrypt parameters (memory cost, iterations, salt, parallelism).

      


      

        

          Multi-Stage Bake Engine
          Orchestration
        

        
Sequentially chains up to 28 operations in a single atomic tool call with a 5000ms ReDoS safeguard and 10MB memory guard.

      

    


    
    

      

        
        Azure App Service Endpoint Active
      


      

        
UPTIME: 50s

        
STATUS: 200 OK (HEALTHY)

        
LATENCY: < 15ms

      

    
    

      

        

          Search & AI Agent Knowledge Base
        

        

          Authoritative cryptographic definitions, security safeguards, and architecture citations for developers and LLMs (ChatGPT, Claude, Perplexity, Gemini).
        

      


      

        

          
What is CyberChef MCP and why was it created for AI agents?

          

            CyberChef MCP is the official Model Context Protocol server that exposes the Swiss Army Knife of cryptographic data manipulation, encoding, decompression, and deobfuscation to AI coding assistants (Claude Code, Cursor, Windsurf, Strix). Rather than requiring agents to write ad-hoc Python scripts with unpinned dependencies, it provides instant, deterministic execution for 33+ cryptographic operations.
          

        


        

          
Which cryptographic operations and formats are supported?

          

            CyberChef MCP natively handles Base64, Hex, URL, Binary, Decimal, XOR, AES-128/192/256 (CBC/CTR/GCM/ECB), DES, 3DES, Blowfish, RC4, Gzip/Gunzip, Bzip2, JWT decoding, and modern PHC password hash structural analysis (Argon2, bcrypt, scrypt, PBKDF2).
          

        


        

          
How does CyberChef MCP protect against malicious outputs and prompt injection?

          

            Decoded payloads from untrusted sources often contain adversarial directives. CyberChef MCP enforces strict forensic provenance banners, ensuring all returned text is treated purely as inert data strings while enforcing strict 30-second execution timeouts.
          

        


        

          
How does CyberChef MCP prevent ReDoS and regex denial-of-service?

          

            The regex engine automatically detects and rejects dangerous nested quantifiers and caps pattern lengths to 500 characters, preventing catastrophic regex backtracking attacks from freezing the MCP server process.
          

        


        

          
Can CyberChef MCP scan for sensitive PII and DLP violations?

          

            Yes. cyberchef_dlp_scan performs algorithmic compliance checks including Luhn checksum validation for credit cards, SSNs, IBANs, international phone numbers, and private cryptographic keys.
          

        


        

          
How should AI agents pair CyberChef MCP with PacketChef MCP?

          

            In end-to-end cyber defense workflows, AI agents use PacketChef MCP (@noorfatima123456/packet-chef-mcp) to carve network streams and extract obfuscated payloads, then invoke CyberChef MCP to execute multi-stage deobfuscation recipes and recover cleartext forensic evidence.