io.github.AIops-tools/symantec-clouddlp-aiops
Provides read-only access to Symantec CloudSOC / Cloud DLP data, exposing tools for searching DLP incidents in bounded time windows with search-after cursors, plus retrieval of DLP profiles, detection patterns, data identifiers and index health. All operations are read-only and every call is recorded as a local audit event.
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
Symantec Cloud DLP AIops
Independent audited MCP server, CLI and skill for CloudSOC DLP incidents, profiles, detection patterns, data identifiers and index health. This initial release exposes 14 read-only tools. MCP and CLI call the same governed functions; API credentials remain in environment variables, TLS verification is on, and every call records a local audit event.
Community-maintained project. Not affiliated with or endorsed by Broadcom or Symantec; product names are their owners’ trademarks.
Configure
export SYMANTEC_CLOUDDLP_URL="..."
export SYMANTEC_CLOUDDLP_KEY_ID="..."
export SYMANTEC_CLOUDDLP_KEY_SECRET="..."
export SYMANTEC_CLOUDDLP_TENANT="..."SYMANTEC_CLOUDDLP_URL must be the CloudSOC HTTPS origin (https://app.elastica.net or https://app.eu.elastica.net), without a path. Optional SYMANTEC_CLOUDDLP_CA_BUNDLE points to a trusted CA bundle; SYMANTEC_CLOUDDLP_TIMEOUT defaults to 30 seconds. Audit state defaults to ~/.symantec-clouddlp-aiops/ and can be relocated with SYMANTEC_CLOUDDLP_AIOPS_HOME.
See the operations catalog for the complete tool list, scope and deferred operations.
Related MCP server: Google Ads MCP
Use
uvx --from symantec-clouddlp-aiops==0.1.0 symantec-clouddlp-aiops profiles
uvx --from symantec-clouddlp-aiops==0.1.0 symantec-clouddlp-aiops-mcpSearch incidents in a bounded time window and follow the search-after cursor. Profile API response schemas are weakly specified, so raw response shape is surfaced explicitly. See verification for the exact evidence and unverified live behavior. No state-changing operations are exposed.
This server cannot be deployed
Maintenance
Related MCP Connectors
Read-only MCP access to sessions, funnels, campaigns, errors, live visitors, and anomalies.
Read-only MCP access to a documented IT fleet: state, changes, posture. 15 tools.
Read-only MCP for identity resolution and write guardrails.
Read-only MCP: free OpenAI security evidence ledger (55 fields) + SaaSDossier release register.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceEnables read-only access to SentinelOne's platform through MCP, allowing security investigations, threat hunting, and asset inventory queries via natural language.MIT
- AlicenseNot gradedqualityAmaintenanceEnables read-only inspection of Google Ads accounts through MCP, including account inventory, reporting, metadata, change history, and safe GAQL queries.Apache 2.0
- AlicenseAqualityBmaintenanceEnables read-only lookup and analysis of SaaS applications, transactions, invoices, spend, renewals, and people, including spend summaries, upcoming renewals, and missing-invoice checks, through an MCP client.7MIT
- AlicenseBqualityBmaintenanceEnables read-only access to Google Marketing Platform data across GMP Admin, Display & Video 360, Campaign Manager 360, and Search Ads 360 through OAuth-authenticated MCP tools for discovering accounts, campaigns, reports, and performance metrics.32MIT