Schema | F6 XDR MCP Server

F6 XDR MCP Server

Official

Describes the environment variables required to run the server.

Name	Required	Description
`XDR_API_KEY`	Yes	Personal API token for the XDR user
`XDR_BASE_URL`	Yes	Base URL of your XDR installation
`XDR_CA_BUNDLE`	No	PEM bundle for installations behind an internal CA.
`XDR_ALLOW_WRITE`	No	Set to '1' to enable the xdr_mark_event tool. Disabled by default.

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Features and capabilities supported by this server

Protocol revision2025-11-25

Capability	Details
`tools`	{ "listChanged": false }
`experimental`	{}

Functions exposed to the LLM to take actions

Name	Description
xdr_searchA	Search for events/objects in an XDR section. Returns matching records; an empty query returns the section unfiltered. Use xdr_get_mapping first to discover available fields.
xdr_countA	Get the total count of records in an XDR section. Optionally filter by query to count matching records only.
xdr_get_mappingA	Get all available search fields for an XDR section. Returns field names, labels, categories, and supported operators. Call this first to understand what you can search on.
xdr_get_filtersC	Get available filter options for an XDR section.

Interactive templates invoked by user choice

Name	Description
No prompts

Contextual data attached and managed by the client

Name	Description
No resources

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/F6-Security/xdr-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server