- Conduid
- Marketplace
- #soar
MCP servers tagged soar
13 live MCP servers tagged "soar", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with soar.
AiSOC
Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.
AI Runbooks
No description published.
Adk Runbooks
No description published.
Wazuh Autopilot
Autonomous AI SOC for Wazuh SIEM — 11 security-expert agents triage, correlate, investigate and plan responses 24/7, every action gated by two-tier human approval. Runs on OpenCla…
Sentinel Autogen Hunter
🛡️ Autonomous Multi-Agent Threat Hunting & Incident Response Swarm engineered with AutoGen, Azure Sentinel, and Model Context Protocol (MCP). Sub-second Netfilter isolation & real…
Hyperautomation
MCP Server for HyperAutomation
Hotwash
Interactive incident-response runbooks: build IR playbooks as visual flowcharts, run them step-by-step, and drive runs from an LLM via MCP.
Synapcores Soar
Open-core SOAR platform for the autonomous SOC. Tier-1 triage agents, immutable audit, MCP portal for examiners. Built on SynapCores.
Wazuh SIEM
Monitor Wazuh SIEM with threat intel, network device logs, custom rules, active response, and Dockerized syslog collection
Splunk SOAR Playbook Lab
Validate SOAR playbooks against BOTS v3 evidence using Splunk MCP, MITRE ATT&CK, VirusTotal, and approval-gated dry runs.
Tracecat MCP Community
MCP server for Tracecat SOAR platform — 44 tools for workflows, actions, cases, executions, secrets, tables, schedules & more
Agent Threat Detection
Runtime threat detection for AI agent ecosystems: per-agent behavioural baselines, behavioural and Sigma-style detections, OCSF findings and approval-gated containment through the…
Soc Watchfloor
No description published.