Aircrack-ng MCP Server

Developed By: Anil Parashar (TechChip)
YouTube: @techchipnet | Website: techchip.net

Aircrack-MCP is a Model Context Protocol (MCP) server that enables large language models to interact with Aircrack-ng tools. It allows AI systems to perform and automate WiFi penetration testing tasks. This integration streamlines wireless security assessments using intelligent, model-driven workflows.

Prerequisites

| Requirement | Details | |---|---| | Python | 3.10+ | | aircrack-ng | Must be installed and in $PATH | | Privileges | Root / Administrator (required for monitor mode) | | OS | Kali Linux recommended (aircrack-ng has best support) |

Install aircrack-ng

# Debian / Ubuntu / Kali Linux
sudo apt install aircrack-ng

# Arch
sudo pacman -S aircrack-ng

# macOS (Homebrew)
brew install aircrack-ng

Available Tools

| Tool | Description | |---|---| | start_monitor | Enable monitor mode on a wireless interface | | stop_monitor | Disable monitor mode | | scan_wifi | Scan nearby WiFi networks (time-limited) | | capture_handshake | Capture WPA handshake for a target BSSID | | deauth | Send deauth packets to force client reconnection | | crack_wifi | Crack WPA/WEP key with a wordlist | | list_interfaces | List all available wireless interfaces | | fake_auth | Fake authentication attack (WEP) | | arp_replay | ARP request replay to generate WEP IVs fast | | decrypt_capture | Decrypt captured packets with a known key | | create_evil_twin | Create a fake AP for MITM testing | | auto_crack_wep | Automatically crack all nearby WEP networks | | clean_capture | Clean capture files for faster WPA cracking |

Root Privileges Configuration (Linux)

Since aircrack-ng tools require root privileges, and MCP servers run in the background without the ability to ask for a password, you must configure sudo to allow running the server without a password prompt.

1. Configure Passwordless Sudo

Run the following command to edit the sudoers file:

sudo visudo

Add the following line at the end of the file (replace your_username and /path/to/... with your actual username and absolute path to the script):

your_username ALL=(ALL) NOPASSWD: /usr/bin/python3 /absolute/path/to/aircrack-mcp/aircrackmcp.py

Usage

Run the server directly

sudo python3 aircrackmcp.py

The server reads JSON-RPC 2.0 messages from stdin and writes responses to stdout.

MCP Client Configuration

Add this to your MCP client config (e.g. claude_desktop_config.json):

{
  "mcpServers": {
    "aircrack": {
      "command": "sudo",
      "args": [
        "python3",
        "/absolute/path/to/aircrack-mcp/aircrackmcp.py"
      ]
    }
  }
}

Protocol

This server implements the MCP specification using:

• Transport: stdio (stdin/stdout)
• Protocol: JSON-RPC 2.0
• MCP Version: 2024-11-05

Supported Methods

| Method | Description | |---|---| | initialize | Handshake — returns server capabilities | | notifications/initialized | Client confirmation (no response) | | ping | Health check | | tools/list | List available tools | | tools/call | Execute a tool |

Example Session

→ {"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2024-11-05","clientInfo":{"name":"test","version":"1.0"}}}
← {"jsonrpc":"2.0","id":1,"result":{"protocolVersion":"2024-11-05","capabilities":{"tools":{}},"serverInfo":{"name":"aircrack-mcp","version":"1.0.0"}}}

→ {"jsonrpc":"2.0","method":"notifications/initialized"}

→ {"jsonrpc":"2.0","id":2,"method":"tools/list"}
← {"jsonrpc":"2.0","id":2,"result":{"tools":[...]}}

→ {"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"start_monitor","arguments":{"interface":"wlan0"}}}
← {"jsonrpc":"2.0","id":3,"result":{"content":[{"type":"text","text":"Monitor mode enabled on wlan0mon"}],"isError":false}}

Security

• Input Validation: Interface names are validated against ^[a-zA-Z0-9_-]{1,32}$
• BSSID Validation: MAC addresses are validated against standard format
• File Validation: File paths are checked for existence before use
• Timeouts: Long-running commands have enforced timeouts to prevent hangs
• No Shell Execution: Commands use list-based subprocess.run() (no shell injection)

---

⚠️ Legal Disclaimer: This tool is for authorized penetration testing and security research only. Unauthorized access to computer networks is illegal. Always obtain written permission before testing.

---

Developed with ❤️ by Anil Parashar (TechChip)