Security Infrastructure Mcp Servers
🛠️ Key Features Core Functionality MCP Protocol Integration: Native Model Context Protocol server implementation Asynchronous Operations: Non-blocking API calls for optimal performance Multi-platform Support: Unified interface for Splunk, CrowdStrike, and MISP Flexible Query Language: Support for SPL, FQL, and MISP REST queries Security & Authentication Multiple Auth Methods: Session-based, token-based, and OAuth 2.0 authentication SSL/TLS Support: Configurable certificate verification for secure connections API Key Management: Secure credential handling and rotation support Error Recovery: Automatic token refresh and connection retry mechanisms Data Processing Real-time Search: Live querying across security platforms Structured Output: Consistent JSON response format across all integrations Time Range Flexibility: Custom time windows and relative time specifications Result Pagination: Configurable limits and sorting for large datasets Development & Testing Comprehensive Testing: Unit tests with pytest framework Docker Support: Containerized deployment with docker-compose Configuration Management: YAML-based configuration with environment variable support Logging & Monitoring: Structured logging with configurable levels 📋 Requirements
Server Config
{
"mcpServers": {
"splunk-siem": {
"command": "python",
"args": [
"/path/to/SecurityInfrastructure/src/splunk_server.py"
],
"env": {
"SPLUNK_HOST": "your-splunk-host.com",
"SPLUNK_PORT": "8089",
"SPLUNK_USERNAME": "admin",
"SPLUNK_PASSWORD": "your-password",
"SPLUNK_TOKEN": "your-api-token",
"SPLUNK_VERIFY_SSL": "true"
}
},
"crowdstrike-edr": {
"command": "python",
"args": [
"/path/to/SecurityInfrastructure/src/crowdstrike_server.py"
],
"env": {
"CROWDSTRIKE_CLIENT_ID": "your-client-id",
"CROWDSTRIKE_CLIENT_SECRET": "your-client-secret",
"CROWDSTRIKE_BASE_URL": "https://api.crowdstrike.com"
}
},
"misp-threat-intel": {
"command": "python",
"args": [
"/path/to/SecurityInfrastructure/src/misp_server.py"
],
"env": {
"MISP_URL": "https://your-misp-instance.com",
"MISP_KEY": "your-api-key",
"MISP_VERIFY_CERT": "true"
}
}
}
}