cosmic-mcp

All servers

Security Detections

io.github.MHaggis/security-detections-mcp · version 3.3.4

Community listing. Not installed or verified by cosmic-mcp. Read the source and its permissions before you run it.

Search security detections across Sigma, Splunk, Elastic, KQL, Sublime, CQL and Jamf with ATT&CK.

https://github.com/MHaggis/Security-Detections-MCP

Quick facts

  • Listing: Community
  • Published Nov 4, 19:19 UTC
  • Transport: stdio
  • Package: npm security-detections-mcp 3.3.4
  • Listed by cosmic-mcp: Nov 9, 04:25 UTC

Security Web search

Setup snippets

Generated from the registry entry. cosmic-mcp has not run or reviewed this server; values in angle brackets are yours to fill in.

Run it locally (npm)

npx -y '[email protected]'

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "security-detections-mcp": {
      "args": [
        "-y",
        "[email protected]"
      ],
      "command": "npx",
      "env": {
        "CQL_HUB_PATHS": "<your cql hub paths>",
        "ELASTIC_PATHS": "<your elastic paths>",
        "JAMF_PROTECT_PATHS": "<your jamf protect paths>",
        "KQL_PATHS": "<your kql paths>",
        "SIGMA_PATHS": "<your sigma paths>",
        "SPLUNK_PATHS": "<your splunk paths>",
        "STORY_PATHS": "<your story paths>",
        "SUBLIME_PATHS": "<your sublime paths>"
      }
    }
  }
}

Claude Code

claude mcp add 'security-detections-mcp' -- npx -y '[email protected]'

Cursor (.cursor/mcp.json)

{
  "mcpServers": {
    "security-detections-mcp": {
      "args": [
        "-y",
        "[email protected]"
      ],
      "command": "npx",
      "env": {
        "CQL_HUB_PATHS": "<your cql hub paths>",
        "ELASTIC_PATHS": "<your elastic paths>",
        "JAMF_PROTECT_PATHS": "<your jamf protect paths>",
        "KQL_PATHS": "<your kql paths>",
        "SIGMA_PATHS": "<your sigma paths>",
        "SPLUNK_PATHS": "<your splunk paths>",
        "STORY_PATHS": "<your story paths>",
        "SUBLIME_PATHS": "<your sublime paths>"
      }
    }
  }
}

VS Code (.vscode/mcp.json)

{
  "servers": {
    "security-detections-mcp": {
      "args": [
        "-y",
        "[email protected]"
      ],
      "command": "npx",
      "env": {
        "CQL_HUB_PATHS": "<your cql hub paths>",
        "ELASTIC_PATHS": "<your elastic paths>",
        "JAMF_PROTECT_PATHS": "<your jamf protect paths>",
        "KQL_PATHS": "<your kql paths>",
        "SIGMA_PATHS": "<your sigma paths>",
        "SPLUNK_PATHS": "<your splunk paths>",
        "STORY_PATHS": "<your story paths>",
        "SUBLIME_PATHS": "<your sublime paths>"
      },
      "type": "stdio"
    }
  }
}

Related servers

  • AgentTrust — Identity & Trust for A2A Agents Verified domain
    Identity, trust, and A2A orchestration for autonomous AI agents. Official A2A partner.
  • AgentMash Verified domain
    All your bookmarks in one library. Share them with your AI agents. Read-only search over your saves.
  • Agentic Terminal Directory Verified domain
    Verified merchants accepting agentic payments on Lightning/L402/BOLT12/USDT — search, verify, pay.
  • Ankra Docs Verified domain
    Search the Ankra documentation: clusters, stacks, GitOps, CI/CD and the CLI. No account needed.
  • Auralogs Verified domain
    Read-only access to Auralogs production logs: search logs, inspect errors, review AI analyses.
  • AutoRFP.ai Verified domain
    Search AutoRFP.ai projects, requirements, content library, and tags for Q&A and analytics.