pm3-mcp

MCP server for Proxmark3 RFID/NFC tag identification and reading. Wraps the iceman firmware client to detect, identify, and dump tag contents via single subprocess calls. Exposes operations as Model Context Protocol tools over stdio transport.

Built for use with Claude Code on a Raspberry Pi 5, but works with any MCP client on any system with a Proxmark3.

• Tag detection: auto-detect LF and HF tags (MIFARE, EM410x, HID, iClass, DESFire, etc.)
• HF identification: UID, ATQA, SAK, protocol details, PRNG weakness detection, magic tag identification
• LF identification: tag type, ID, modulation
• Block reading: read individual MIFARE Classic blocks with key authentication
• Memory dumping: full tag dumps (MIFARE Classic 1K/4K, Ultralight) saved as artifacts
• Engagement logging: timestamped command log (JSONL), per-engagement folders

• Python 3.11+
• Proxmark3 with iceman firmware (pm3 client on PATH)
• User in dialout group for serial access (sudo usermod -aG dialout $USER)
• Build iceman from source: https://github.com/RfidResearchGroup/proxmark3

git clone https://github.com/mplogas/pm3-mcp.git
cd pm3-mcp
pip install -e ".[dev]"

Add to your .mcp.json:

{
  "mcpServers": {
    "pm3": {
      "command": "/path/to/.venv/bin/python",
      "args": ["-m", "pm3_mcp"],
      "env": {
        "PIDEV_ENGAGEMENTS_DIR": "/path/to/engagements"
      }
    }
  }
}

Set PIDEV_ENGAGEMENTS_DIR to control where engagement logs are written. Defaults to ./engagements/ relative to the package root.

| Tool | Safety Tier | Description | |---|---|---| | hw_status | read-only | Device info, firmware, key dictionaries loaded | | detect_tag | read-only | Auto-detect any LF/HF tag on the reader | | hf_info | read-only | Detailed HF tag identific