Skip to main content
Glama
DeepTempo

deeptempo-mcp-servers

Official
by DeepTempo

DeepTempo MCP Servers

Model Context Protocol (MCP) servers for DeepTempo AI SOC.

Overview

This package provides 4 MCP servers for DeepTempo AI SOC:

  1. deeptempo-findings - Findings and case management (FastMCP)

  2. tempo-flow - Investigation workflow orchestration

  3. approval - Action approval workflow

  4. attack-layer - MITRE ATT&CK layer generation

Related MCP server: cti-mcp-server

Installation

# Install from source (development)
pip install -e .

# Install deeptempo-core dependency first
pip install -e ../deeptempo-core

# Install from git
pip install git+https://github.com/YOUR_USERNAME/deeptempo-mcp-servers.git

Usage

Running Individual Servers

# deeptempo-findings server (FastMCP)
python servers/deeptempo_findings.py

# tempo-flow server
python servers/tempo_flow.py

# approval server
python servers/approval.py

# attack-layer server
python servers/attack_layer.py

Using with Claude Desktop

Add to your Claude Desktop MCP configuration (~/.config/claude/mcp.json):

{
  "mcpServers": {
    "deeptempo-findings": {
      "command": "python3",
      "args": ["/path/to/deeptempo-mcp-servers/servers/deeptempo_findings.py"],
      "cwd": "/path/to/your/project"
    },
    "tempo-flow": {
      "command": "python3",
      "args": ["/path/to/deeptempo-mcp-servers/servers/tempo_flow.py"],
      "cwd": "/path/to/your/project"
    },
    "approval": {
      "command": "python3",
      "args": ["/path/to/deeptempo-mcp-servers/servers/approval.py"],
      "cwd": "/path/to/your/project"
    },
    "attack-layer": {
      "command": "python3",
      "args": ["/path/to/deeptempo-mcp-servers/servers/attack_layer.py"],
      "cwd": "/path/to/your/project"
    }
  }
}

Server Descriptions

deeptempo-findings

Provides comprehensive access to findings and cases:

Tools:

  • list_findings - List security findings with filters

  • get_finding - Get detailed finding information

  • list_cases - List investigation cases

  • get_case - Get detailed case information

  • create_case - Create new investigation case

  • update_case - Update case details

  • add_finding_to_case - Link finding to case

  • And 17+ more tools for case management

tempo-flow

Investigation workflow orchestration:

Tools:

  • tempo_get_workflows - List available workflows

  • tempo_run_workflow - Execute investigation workflow

approval

Action approval workflow:

Tools:

  • create_approval_action - Submit action for approval

  • list_approval_actions - List pending/approved actions

  • get_approval_action - Get action details

  • approve_action - Approve pending action

  • reject_action - Reject pending action

attack-layer

MITRE ATT&CK layer generation:

Tools:

  • get_attack_layer - Get ATT&CK Navigator layer

  • get_technique_rollup - Get technique statistics

  • get_findings_by_technique - Find findings for technique

  • create_attack_layer - Create custom layer

Configuration

The servers use configuration from deeptempo-core. Set environment variables:

# Database
export DATABASE_URL=postgresql://user:pass@localhost:5432/deeptempo_soc

# Or individual components
export POSTGRES_HOST=localhost
export POSTGRES_PORT=5432
export POSTGRES_DB=deeptempo_soc
export POSTGRES_USER=deeptempo
export POSTGRES_PASSWORD=your_password

# Demo mode (uses generated sample data)
export DEMO_MODE=true

Development

# Install with dev dependencies
pip install -e ".[dev]"

# Run tests
pytest

# Format code
black servers/
ruff check servers/

Architecture

deeptempo-mcp-servers/
├── servers/
│   ├── __init__.py
│   ├── deeptempo_findings.py  # FastMCP server
│   ├── tempo_flow.py           # Standard MCP server
│   ├── approval.py             # Standard MCP server
│   ├── attack_layer.py         # Standard MCP server
│   └── base.py                 # Shared utilities
└── tests/
    └── test_servers.py

License

MIT License - see LICENSE file for details.

F
license - not found
-
quality - not tested
D
maintenance

Maintenance

Maintainers
Response time
Release cycle
Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • F
    license
    -
    quality
    B
    maintenance
    Enables interaction with Arcanna's AI-powered security use cases, allowing users to manage jobs and integrations, query security events, provide feedback for model training, and generate/execute Python code for security automation.
    Last updated
  • F
    license
    -
    quality
    D
    maintenance
    Provides threat intelligence tools like IoC lookups, event backtracking, and IP enrichment via MCP, enabling automated triage and evidence queries.
    Last updated
    1
  • A
    license
    A
    quality
    A
    maintenance
    Exposes 79 cybersecurity skills and 12 orchestrator agents over MCP, with a typed 11-field output contract, an enforced resolvable-evidence gate (no verdict without a resolvable source), and human-approval gating for every mutating action. Apache-2.0, stdlib-only.
    Last updated
    8
    3
    Apache 2.0

View all related MCP servers

Related MCP Connectors

  • Runtime permission, approval, and audit layer for AI agent tool execution.

  • Query and retrieve information about various adversarial tactics and techniques used in cyber atta…

  • Offline methodology engine for authorized penetration testing, CTF, and security research.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/DeepTempo/deeptempo-mcp-servers'

If you have feedback or need assistance with the MCP directory API, please join our Discord server