About SecOps Field Notes
SecOps Field Notes is an MCP server in the Finance category: cVSS scoring, IOC extraction, email header triage, hash/JWT/timestamp decoding, CISA KEV lookup.
Install
git clone https://github.com/labaccessnow/secops-field-notes-mcpThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (10)
analyze_email_headersThe Received chain in order with hop delays, the origin IP, SPF/DKIM/DMARC, and the mismatches phishing triage looks for
Parameters not published.
convert_timestampEpoch s/ms/µs, Windows FILETIME, ISO 8601, RFC 2822 — into every form
Parameters not published.
cvss_scoreCVSS 3.1 base score from a vector or the eight metrics, exactly as FIRST computes it
Parameters not published.
decode_jwtHeader, payload, times as dates; flags alg:none, expiry, tokens that never expire
Parameters not published.
decode_layersChain base64 / hex / URL / HTML-entity / ROT13 decoding and see each layer
Parameters not published.
defang_texthxxp[://], [.], [at] and back
Parameters not published.
extract_iocsEvery IP, domain, URL, email, CVE id and hash in a blob of text — refanged on the way in, defanged on the way out
Parameters not published.
identify_hashbcrypt, Argon2, yescrypt, Unix crypt, LM:NT, MD5/NTLM, SHA-1/224/256/384/512 — by shape, with what that implies
Parameters not published.
latest_field_noteWhat got exploited this week
Parameters not published.
lookup_kevIs this CVE exploited in the wild — CISA KEV date added, due date, ransomware use, required action
Parameters not published.
Ask AI
Ask AI about SecOps Field Notes
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.