evillimiter

MCP server wrapper for EvilLimiter. Provides LLM-accessible tools for network bandwidth control, monitoring, and traffic analysis. Docker-based with safety features.

Installation

Run this command in your terminal to add the MCP server to Claude Code.

Run in terminal:

View docs

Command

claude mcp add --transport stdio i3t4an-evillimiter-mcp-server docker run --cap-add NET_ADMIN --cap-add NET_RAW --network host evillimiter-mcp-server \
  --env EVILLIMITER_NETMASK="Network mask (auto-detected if not set)" \
  --env EVILLIMITER_API_TOKEN="API token for authentication (optional)" \
  --env EVILLIMITER_INTERFACE="Network interface to use (auto-detected if not set)" \
  --env EVILLIMITER_GATEWAY_IP="Gateway IP address (auto-detected if not set)" \
  --env EVILLIMITER_GATEWAY_MAC="Gateway MAC address (auto-detected if not set)" \
  --env EVILLIMITER_SAFETY_MODE="Enable safety checks (default: true)" \
  --env EVILLIMITER_ALLOWED_RANGES="Comma-separated IP ranges to allow (if safety mode on)"

How to use

This MCP server provides a programmable interface to EvilLimiter, enabling an assistant to scan the local network, enumerate hosts, throttle bandwidth, block or free hosts, and monitor traffic. Tools exposed include scan_network, list_hosts, limit_bandwidth, block_host, free_host, add_host, monitor_bandwidth, analyze_traffic, and reconstruction/watch tools such as watch_status, watch_add, watch_remove, watch_configure, and flush_configuration. You can instruct Claude Desktop or your MCP client to call these tools via the widely supported MCP protocol, for example to scan the network, limit a device's bandwidth, or add a device to the watchlist. The server is designed for controlled testing in Linux environments with EvilLimiter, and requires appropriate privileges for network manipulation. Ensure you operate only on networks you own or have explicit written permission to test.

How to install

Prerequisites:

Docker Desktop with MCP Toolkit enabled
Linux host (EvilLimiter requires Linux)
Docker MCP CLI plugin available (docker mcp commands)
Sufficient privileges to run privileged containers (NET_ADMIN and NET_RAW)

Installation steps:

Build the Docker image for the MCP server

docker build -t evillimiter-mcp-server .

Create the custom MCP catalog (as described in the README)

Create ~/.docker/mcp/catalogs/custom.yaml and populate with the provided catalog entry for EvilLimiter (including tools and metadata).

Update the MCP registry to expose the EvilLimiter entry

Edit ~/.docker/mcp/registry.yaml and add under registry:

evillimiter:
  ref: ""

Run the container with required privileges The container needs NET_ADMIN and NET_RAW capabilities and should run with host networking to function properly.

docker run --cap-add=NET_ADMIN --cap-add=NET_RAW --network=host evillimiter-mcp-server

Configure your MCP client/Claude Desktop to point to the custom catalog path if applicable and verify that the evillimiter server appears in your registry.

Notes:

If you plan to test safely, consider setting EVILLIMITER_SAFETY_MODE and EVILLIMITER_ALLOWED_RANGES in the environment to constrain behavior.
Ensure that the environment follows the security considerations described in the README.

Additional notes

Tips and caveats:

The container requires elevated privileges (NET_ADMIN, NET_RAW) and host networking; this increases risk, so only run in controlled lab environments.
ARP spoofing and traffic manipulation affect the entire local network segment; logs are emitted to stderr.
If tools do not appear in Claude Desktop, verify image build success, catalog/registry syntax, and that the custom catalog is loaded by Claude Desktop.
You can customize the network interface, gateway IP/MAC, and safety settings via environment variables (see EVILLIMITER_* variables).
IPv4 only; Linux host required. The solution relies on EvilLimiter CLI under the hood.
For upgrades, rebuild the Docker image and re-deploy the container; update the catalog if you add new tools.

Related MCP Servers

Gitingest

136

mcp server for gitingest

ytt

MCP server to fetch YouTube transcripts

claude_autoapprove_mcp

An MCP server to inject auto-approve MCP functionality into Claude Desktop

fegis

Define AI tools in YAML with natural language schemas. All tool usage is automatically stored in Qdrant vector database, enabling semantic search, filtering, and memory retrieval across sessions.

davinci -professional

An enterprise-grade MCP server that exposes the full functionality of DaVinci Resolve and DaVinci Resolve Studio (through version 20) to either Claude Desktop or Cursor MCP clients. Fully configured and tested as a Claude Desktop Extension making installation as easy as clicking a button. Supports both Windows and Macintosh.

openapi -proxy

An MCP server that provides tools for exploring large OpenAPI schemas