- Conduid
- Marketplace
- #splunk
MCP servers tagged splunk
23 live MCP servers tagged "splunk", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with splunk.
Splunk
MCP server for Splunk
Threat Hunting MCP Server
A minimal, modular MCP server that equips your AI with practical capabilities for real-world threat hunting workflows.
Kassi
An AI agent that load-tests a code change, finds the regression in Splunk, and writes the fix. A model-agnostic, audited state machine over MCP, orchestrating the Grafana k6 and o…
Splunk
A Model Context Protocol server for interacting with Splunk Enterprise/Cloud
SOC Sentinel Splunk
Agentic SOC analyst for Splunk — Claude investigates via the Splunk MCP Server; a deterministic 3-layer validator verifies every finding against real data. An anti-hallucination t…
Argus Detection Evolution
ARGUS: Adversarial Detection Evolution Engine: Red AI attacks, Blue AI defends, on real Splunk data. Splunk Agentic Ops Hackathon 2026 (Security track).
Splunkology
Autonomous SOC triage agent for Splunk — live SPL, MITRE ATT&CK verdicts, tamper-evident audit log, pluggable orchestration over a Splunk MCP server.
Supplyguard
Agentic software supply-chain security on Splunk — senses CI/CD dependency changes via the Splunk MCP Server, detects CVEs & typosquatting, triages with a hosted security model (f…
WRG-11/wrg-sigma-rules
rule production corpus across 11 MITRE ATT&CK tactic categories. Standalone server + Claude Code plugin distribution.
Lamaxu Ibm Mq Monitoring
Lamaxu is an IBM MQ Monitoring tool that that exposes metrics in JMX format
TRIDENT AI
"Autonomous incident intelligence swarm for Splunk Agentic Ops Hackathon 2026 — CDTSM + Foundation AI + MCP Server"
AI Built Portfolio
Portfolio of AI-assisted apps and automation scripts (Python, Splunk, lab tooling) built with Claude Code.
Splunk MCP Go
A Model Context Protocol (MCP) server in Go that provides a splunk_search tool, enabling LLMs to query Splunk instances via the REST API
Synapcores Soar
Open-core SOAR platform for the autonomous SOC. Tier-1 triage agents, immutable audit, MCP portal for examiners. Built on SynapCores.
Splunk SOAR Playbook Lab
Validate SOAR playbooks against BOTS v3 evidence using Splunk MCP, MITRE ATT&CK, VirusTotal, and approval-gated dry runs.
Service Demo
Evidence-first MCP incident response demo integrating Splunk, a service catalog, and a service desk.
Nexabank AI Governance
AI agent governance & security gateway for banking — FastAPI + real Splunk, Azure AD, CrowdStrike, Purview integrations
Splunk App Lifecycle Copilot
Self-healing loops that carry a Splunk app from raw logs to AppInspect-green to cost-clean SPL, validated through the Splunk MCP server with an auditable provenance ledger.
Splunk MCP Guard
Policy-enforcing proxy in front of any Splunk MCP server
Mike
A Splunk-native agent that turns SOC analyst reasoning into a queryable institutional knowledge graph, accessible from SPL, a Python CLI, and a Model Context Protocol server.
A2a Splunk
Splunk Observability bridge exposing MCP servers via the A2A protocol for unified monitoring automation.
Meridian
Context-aware incident intelligence. Turns SIEM detections into source-bound incident narratives via a Gemini-3 reasoning agent on the MetisOS protocol stack.
SOC AutoPilot
SOC AutoPilot — Autonomous AI security agent that reduces Splunk alert triage from 45 minutes to under 2 minutes. Uses Splunk MCP Server, Foundation-sec hosted model, and a self-l…