About Splunk Soar MCP
Splunk Soar MCP is an MCP server published by huseynAgazade in the Analytics category: mCP server for Splunk SOAR (Phantom) — headless playbook authoring, deployment, runs, and case ops via the REST API.
The repository has 2 stars and 0 forks, with the last commit a month ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
git clone https://github.com/huseynAgazade/splunk-soar-mcpThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (9)
soar_get_app_actionOne action in full — every parameter and output datapath.
Parameters not published.
soar_get_assetOne asset's full configuration, credentials redacted.
Parameters not published.
soar_get_custom_functionOne custom function, with its inputs, outputs and source.
Parameters not published.
soar_list_app_actionsThe actions an app exposes.
Parameters not published.
soar_list_appsInstalled apps, filterable by name.
Parameters not published.
soar_list_assetsConfigured assets.
Parameters not published.
soar_list_custom_functionsCustom functions available to playbooks.
Parameters not published.
soar_list_reposSource-control repositories.
Parameters not published.
soar_system_infoInstance version, base URL, this server's mode and label scope. Call it first.
Parameters not published.
Ask AI
Ask AI about Splunk Soar MCP
Powered by Claude
Security checks
6 checks have not been run yet.