1. Conduid
  2. Search
  3. Fengarde
MCP server · Search

Fengarde

by · github.com/supermhel/fengarde

Open-source SIEM pipeline: raw security logs → OCSF → correlation rules → alerts. OT and IT in one pipeline. Local-first AI triage, 10-minute self-hosted quickstart.

Unclaimed blue-teamdetection-engineeringdockerhomelabintrusion-detectionlog-analysismcpnis2ocsfocsf-nativeopen-sourceopensearchpythonsecurityself-hostedsiem
InstallView source
39Low

Scored 27 days ago · breakdown

About Fengarde

Fengarde is an MCP server published by supermhel in the Search category: open-source SIEM pipeline: raw security logs → OCSF → correlation rules → alerts. OT and IT in one pipeline. Local-first AI triage, 10-minute self-hosted quickstart.

The repository has 12 stars and 0 forks, with the last commit a month ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/supermhel/fengarde

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Fengarde

Powered by Claude · Grounded in docs

I know everything about Fengarde. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.6.0v0.6.0 · 27 Aug 2026First tagged release since v0.5.0 (2026-07-23) — 310 commits' worth of shipped, tested work that had never been cut into a version. Closes the gap SSOT.md's own review flagged: everything below was already proven/live-verified on `main`,…
v0.4.0v0.4.0 · 27 Aug 2026Added (v0.4 Track S — opt-in auth) `FENGARDE_API_KEY`** shared-secret auth on the WS-3 triage API and WS-6 inventory API (`X-Api-Key` header, constant-time compare). Unset (default) = every request allowed + a startup warning; set = 401 on…
v0.3.0v0.3.0 · 27 Aug 2026Added DB-audit parser** (`db_audit`) — vendor-agnostic database audit logs → OCSF Datastore Activity (6005), activity_id 5 for GRANT/REVOKE/ALTER. Un-dormants the `bank_db_priv_esc` rule, which matched a class no parser emitted. Windows…
v0.1.0v0.1.0 · 27 Aug 2026Added Full detection pipeline** — end-to-end flow: collect → normalize (OCSF) → detect → index → dashboard. Every stage is independently testable and wired together in a single `docker compose up`. 4 log source parsers** — Linux SSH…
v0.5.0v0.5.0 · 28 Jul 2026[0.5.0] - 2026-07-23 Added (M2 proof artifacts + M7 continuous tracks, 2026-07-22) mypy blocking gate**: re-measured the stale "20 findings" baseline before trusting it — a live re-run found 47 across all 8 workstreams, not 20. Fixed all…
Questions

About Fengarde

How do I install Fengarde?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Fengarde safe to use with an AI agent?

Its trust score is 39 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Fengarde still maintained?

Yes — the latest release is v0.6.0 (27 Aug 2026), and the last commit was a month ago. The repository has 12 stars.