Skip to main content
Glama

Castle MCP by usefulapi

Server Details

Investigate security events and manage the allow/deny lists an analyst acts on.

The last two health checks of this connector failed. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.

If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.

Status
Unhealthy
Uptime
0.0% over the last 24 hours
Last Tested
Transport
Streamable HTTP
URL
Repository
m190/usefulapi-mcp
GitHub Stars
0
ChatGPT
–
Claude
–

TDQS

A3.8/5.0

Scored across 14 tools

Disambiguation5/5

Each tool targets a distinct resource+action pair, and the naming cleanly separates list-level operations (castle_get_list, castle_search_lists, castle_update_list) from item-level ones (castle_get_list_item, castle_search_list_items, castle_update_list_item). The event tools are also well differentiated: search_events returns rows, group_events aggregates, and get_events_schema documents fields. No two tools appear to do the same thing.

Naming Consistency5/5

Every tool follows a strict castle_verb_noun pattern with snake_case throughout. Verb choices are predictable and reused consistently (create/get/update/search/archive/unarchive). The naming reads as one coherent system.

Tool Count5/5

Fourteen tools is well-scoped for a security event + allow/deny list API. Each tool maps to a distinct endpoint-style operation and earns its place, with no redundant wrappers. The count sits comfortably in the ideal 3-15 range.

Completeness4/5

Coverage is strong: lists support create/get/search/update, items support create/get/search/count/update plus archive/unarchive as a reversible delete, and events support schema/search/group. The one notable gap is the absence of a delete_list operation, so list lifecycle is not fully closed. Otherwise agents can complete most workflows without dead ends.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      Not graded
      quality
      C
      maintenance
      Enables security analysts, operators, and administrators to investigate incidents, identities, devices, and indicators, run advanced hunting, and perform guarded response actions against Microsoft Defender XDR data.
      MIT
    • F
      license
      Not graded
      quality
      D
      maintenance
      Provides threat intelligence tools like IoC lookups, event backtracking, and IP enrichment via MCP, enabling automated triage and evidence queries.
      1
      -
    • A
      license
      Not graded
      quality
      B
      maintenance
      Enables MCP clients to triage SOC alerts while enforcing a trust firewall across retrieval, memory, and privileged actions. It exposes tools for alerts, logs, memory, and alert actions, with defenses that refuse risky operations in the presence of attacker-controllable content.
      MIT
    Try in Browser

    Glama MCP Gateway

    Add one secure layer between your agents and this server.