About FlowSentinel
FlowSentinel is an MCP server in the Security category: local-first MCP server for process-aware network visibility, PCAP analysis, and explainable behavioral threat detection in Go.
Install
git clone https://github.com/ClementG91/MCP-FlowSentinelThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (12)
analyze_networkLive capture on a named interface (default 5 s, max 60 s)
Parameters not published.
analyze_pcapAnalyze a saved `.pcap` / `.pcapng` file (max 1 GB)
Parameters not published.
analyze_processDeep-dive on a specific process: open connections, parent chain, GeoIP, history
Parameters not published.
get_alertsQuery the persistent alert log for fired webhook alerts
Parameters not published.
get_configReturn the current runtime configuration (webhook URL masked)
Parameters not published.
get_daemon_statsReturn runtime statistics for the background daemon
Parameters not published.
get_flow_historyQuery the rolling history of past capture sessions
Parameters not published.
get_process_mapSnapshot of all processes with open sockets
Parameters not published.
list_interfacesList all pcap-visible network interfaces
Parameters not published.
live_watchTargeted live capture filtered by process name and/or IP address
Parameters not published.
reload_configHot-reload the YAML config file without restarting the server
Parameters not published.
scan_processDeep security scan of a process: binary hash, VirusTotal lookup, loaded modules
Parameters not published.
Ask AI
Ask AI about FlowSentinel
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.