plctap MCP server
io.github.ymxc152/plctap·v0.6.2·2 starsAgent-PLC MCP Server: read & diagnose Modbus / FINS / MELSEC / S7 / IEC 104 / ENIP / OPC UA PLCs.
2 stars67 downloads/wk
Reviews
Write oneNobody has reviewed plctap yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
plctap tools (17, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
detect_device设备自动识别: 给定 host 自动扫端口并判定协议 (v0.4, 全程只读)。
diagnose综合观测给出结构化的故障候选结论 (确定性规则, 不编故事; 全程只读)。
get_listener_frames取监听收下的帧 (direction/peer/frame_hex), 供 parse_frame/diagnose 分析。
get_proxy_frames取代理录制的双向透传帧 (direction: c2s=上位机→PLC, s2c=PLC→上位机)。
list_protocols列出本 server 支持的工业协议及其能力。
parse_frame把一帧报文 hex 逐字段结构化解析 (不需要连接设备)。
parse_pcap解析 Wireshark 导出 pcap: 按 TCP 流聚合载荷 -> 按协议切帧 -> 逐帧 parse_auto。
plc_browse浏览地址空间: 从 node 展开一层子节点 (诊断场景的"列目录")。
plc_read从 PLC 读取数据区并按数据类型解释。
plc_writewrite action写数据点 (危险操作: 需要用户明确授权)。
probe_device测试能否连上 PLC 并通信, 失败时给出层级归因。
send_framewrite action发送任意原始帧并等待一帧响应 (危险: 直接与真实设备交互)。
start_listener起钓鱼模式监听: 待测设备只能当 client 时, 立假 server 钓出它的帧行为。
start_proxy起透明代理: 上位机 → 代理 → 真实 PLC, 透传同时按协议分帧录制双向帧。
stop_listener停掉指定端口的监听, 返回收/发帧统计。
stop_proxy停掉指定端口的代理, 返回录制统计 (c2s/s2c 帧数)。
validate_frame对一帧报文跑规范校验清单, 逐项 pass/fail (不需要连接设备)。
Public scan report
scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it
- Code scan58 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 21 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumeval / new Function used
exec.evalplctap-0.6.2/src/plctap/pcap.py: …es scapy; install with: uv sync --extra eval (or pip install scapy)" ) from e …
How plctap compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 85/100
- higher than 73% of 4,461 AI and agents servers
- Tools
- 17
- the typical AI and agents server has 6
- Tools that change things
- 12%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 2
- more than 65% of 2,713 AI and agents servers
- Downloads a week
- 67
- more than 51% of 1,554 AI and agents servers with a package
What its tools let an agent do: 11 read · 1 change · 1 send or post · 4 run or deploy
Install plctap in Claude Code, Cursor or VS Code
claude mcp add plctap -- uvx plctap
What the publisher says
From the plctap repository's README, as published. We do not edit it. Read it on GitHub
plctap
<!-- mcp-name: io.github.ymxc152/plctap -->
中文 | English
Agent 的 PLC 驱动层 — 让 Claude / Codex / Cursor 直接连接、读写、诊断
Modbus TCP / Modbus RTU over TCP / FINS / MELSEC / Siemens S7comm / IEC 60870-5-104 / EtherNet/IP (CIP) 设备的 MCP Server。
状态: v0.6 (协议自动识别 + 透明代理 + 故障注入监听 + 八协议端点接入 (含 OPC UA 连接级诊断), 六端点可写 (IEC 104 / OPC UA 仅读); IEC 104 经 lib60870、EtherNet/IP 经 pycomm3 官方实现交叉验证, OPC UA 为 asyncua 官方库台架自洽验证)。
工具
全部工具带 MCP annotations hint (wire 逐键锁定于 tests/testtoolannotations.py): 纯本地解析类 readOnlyHint=true / openWorldHint=false, 联网读/探测/取帧类 readOnlyHint=true, 监听/代理 启停为非只读状态变更 (非破坏、非幂等), 写类 destructiveHint=true 且默认不注册 —— 客户端可 据此判断并行安全性与调用前确认级别。
写能力
PLCTAPALLOWWRITE=true 后八端点中六个可写 (modbus_rtu 与 modbus 同轨同语义; iec104 与 opcua 仅读):
所有写/发送动作逐帧写入审计日志 (发送前留痕, 失败也留)。
协议速查
八个端点的寻址模型与常用参数 (接入前先对表; 工具内 list_protocols 亦可动态获取):
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
plctap: common questions
- Is plctap MCP server safe?
- Yes, by our scan: it is graded A (85/100). Read the plctap safety report
- How do I install plctap?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does plctap need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is plctap maintained?
- The last commit was 53 days ago (2026-09-13). The latest release is v0.6.2.
- How does plctap compare with other AI and agents MCP servers?
- safety score 85/100 (higher than 73% of 4,461 AI and agents servers); tools 17 (the typical AI and agents server has 6); tools that change things 12% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.