Developer Documentation
Integrate Pcap AI's intelligence into your existing security stack, AI agents, and custom workflows.
Integrate PCAP Analysis into Any Workflow
PcapAI exposes its forensics engine through two integration paths — choose the one that fits your stack.
MCP Server — for AI Agents
The MCP Server integration lets AI assistants like Claude Desktop call PcapAI's analysis tools directly during a conversation. Point the agent at a local PCAP file and ask forensic questions in plain language — the server uploads the capture over TLS to the PcapAI engine, which runs deep packet inspection, threat detection, and MITRE ATT&CK mapping server-side. It needs outbound network access and does not run offline. If your captures cannot leave your network, contact us about on-premise deployment.
REST API — for Custom Pipelines
The REST API lets you embed PCAP analysis into scripts, CI pipelines and backend services. Upload a capture file, poll its status, and download the PDF report with the network problems, security findings and remediation steps — ready to attach to a ticket or send to a client.
What You Can Automate
Deep packet inspection and protocol analysis
Threat detection and C2 beaconing identification
MITRE ATT&CK technique mapping
Automated incident report generation
Controls to review in ISO 27001, NIST 800-53, CIS, PCI DSS and NIS2
Bulk PCAP processing via API pipelines