1. Conduid
  2. Security
  3. Suricata MCP
MCP server · Security

Suricata MCP

MCP server for Suricata IDS/IPS and Zeek NSM: analyze EVE JSON alerts, hunt threats, and manage rules from an AI client

Unclaimed mcpsuricata
34Low

Scored 18 days ago · breakdown

About Suricata MCP

Suricata MCP is an MCP server in the Security category: mCP server for Suricata IDS/IPS and Zeek NSM: analyze EVE JSON alerts, hunt threats, and manage rules from an AI client.

The repository has 1 stars and 0 forks.

Install

From source
git clone https://github.com/lidless-labs/suricata-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (4)

suricata_alert_summaryAggregated alert statistics grouped by signature, category, severity, source, or destination

Parameters not published.

suricata_alert_timelineTime-bucketed alert counts with severity breakdown

Parameters not published.

suricata_query_alertsSearch alerts by SID, signature, category, severity, IP, port, protocol, action, time range

Parameters not published.

suricata_top_alertsTop alerts by frequency and severity with unique source/destination counts

Parameters not published.

Ask AI

✦

Ask AI about Suricata MCP

Powered by Claude · Grounded in docs

I know everything about Suricata MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Suricata MCP

How do I install Suricata MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Suricata MCP safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Suricata MCP still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.