1. Conduid
  2. Search
  3. Suricata MCP Server
MCP server · Search

Suricata MCP Server

by · github.com/Hackerobi/suricata-mcp-server

A comprehensive MCP server for Suricata IDS/IPS. Connects Claude Desktop to Suricata for PCAP analysis, rule management (CRUD, enable/disable, search), and rule quality linting via suricata-check. 18 tools built with FastMCP.

Unclaimed last commit 8 months ago search
InstallView source
34Low

Scored 4 months ago · breakdown

About Suricata MCP Server

Suricata MCP Server is an MCP server published by Hackerobi in the Search category: a comprehensive MCP server for Suricata IDS/IPS. Connects Claude Desktop to Suricata for PCAP analysis, rule management (CRUD, enable/disable, search), and rule quality linting via suricata-check. 18 tools built with FastMCP.

The repository has 1 stars and 0 forks, with the last commit 8 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/Hackerobi/suricata-mcp-server

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (7)

**analyze_pcap**Full PCAP analysis — alerts, stats, and EVE JSON events

Parameters not published.

**get_alerts_from_pcap**Alerts only from a PCAP file (parsed fast.log)

Parameters not published.

**get_eve_events_from_pcap**EVE JSON events, filterable by type (alert, dns, http, tls, flow)

Parameters not published.

**get_stats_from_pcap**Stats only from a PCAP file

Parameters not published.

**get_suricata_build_info**Get build info — features, libraries, compile flags

Parameters not published.

**get_suricata_help**Get CLI help output

Parameters not published.

**get_suricata_version**Get installed Suricata version

Parameters not published.

Ask AI

✦

Ask AI about Suricata MCP Server

Powered by Claude · Grounded in docs

I know everything about Suricata MCP Server. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Suricata MCP Server

How do I install Suricata MCP Server?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Suricata MCP Server safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Suricata MCP Server still maintained?

The last commit was 8 months ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.