About Suricata MCP
Suricata MCP is an MCP server in the Security category: mCP server for Suricata IDS/IPS and Zeek NSM: analyze EVE JSON alerts, hunt threats, and manage rules from an AI client.
The repository has 1 stars and 0 forks.
Install
git clone https://github.com/lidless-labs/suricata-mcpThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (4)
suricata_alert_summaryAggregated alert statistics grouped by signature, category, severity, source, or destination
Parameters not published.
suricata_alert_timelineTime-bucketed alert counts with severity breakdown
Parameters not published.
suricata_query_alertsSearch alerts by SID, signature, category, severity, IP, port, protocol, action, time range
Parameters not published.
suricata_top_alertsTop alerts by frequency and severity with unique source/destination counts
Parameters not published.
Ask AI
Ask AI about Suricata MCP
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.