Castle MCP by usefulapi
Server Details
Investigate security events and manage the allow/deny lists an analyst acts on.
The last two health checks of this connector failed. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
- Status
- Unhealthy
- Uptime
- 0.0% over the last 24 hours
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- m190/usefulapi-mcp
- GitHub Stars
- 0
- ChatGPT
- –
- Claude
- –
TDQS
Scored across 14 tools
Each tool targets a distinct resource+action pair, and the naming cleanly separates list-level operations (castle_get_list, castle_search_lists, castle_update_list) from item-level ones (castle_get_list_item, castle_search_list_items, castle_update_list_item). The event tools are also well differentiated: search_events returns rows, group_events aggregates, and get_events_schema documents fields. No two tools appear to do the same thing.
Every tool follows a strict castle_verb_noun pattern with snake_case throughout. Verb choices are predictable and reused consistently (create/get/update/search/archive/unarchive). The naming reads as one coherent system.
Fourteen tools is well-scoped for a security event + allow/deny list API. Each tool maps to a distinct endpoint-style operation and earns its place, with no redundant wrappers. The count sits comfortably in the ideal 3-15 range.
Coverage is strong: lists support create/get/search/update, items support create/get/search/count/update plus archive/unarchive as a reversible delete, and events support schema/search/group. The one notable gap is the absence of a delete_list operation, so list lifecycle is not fully closed. Otherwise agents can complete most workflows without dead ends.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
Search log events, investigate anomalies, and manage cases in your Knowledge Grid tenant.
Fraud and abuse detection for SaaS: investigate scored identities, triage escalations, tune rules.
Investigate and manage email security across Trustifi plans using AI.
Enrich, search, assess, and manage threat intelligence through 80+ typed MCP tools.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables SOC analysts to analyze security incidents, map to MITRE ATT&CK, calculate severity, and recommend remediation actions.2MIT
- AlicenseNot gradedqualityCmaintenanceEnables security analysts, operators, and administrators to investigate incidents, identities, devices, and indicators, run advanced hunting, and perform guarded response actions against Microsoft Defender XDR data.MIT
- FlicenseNot gradedqualityDmaintenanceProvides threat intelligence tools like IoC lookups, event backtracking, and IP enrichment via MCP, enabling automated triage and evidence queries.1-
- AlicenseNot gradedqualityBmaintenanceEnables MCP clients to triage SOC alerts while enforcing a trust firewall across retrieval, memory, and privileged actions. It exposes tools for alerts, logs, memory, and alert actions, with defenses that refuse risky operations in the presence of attacker-controllable content.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.