Skip to main content
Glama
elastic

Elastic Security MCP App

Official
by elastic
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Remote

Related Servers

Alternatives to Elastic Security MCP App

No user-submitted related servers found.

    Related Servers

    • Splunk MCP for SOC Operations

      DeepTempo
      A
      license
      B
      quality
      D
      maintenance
      Enables AI-driven SOC investigations by providing automated Splunk querying, threat intelligence enrichment, and response actions through natural language. Includes tools for IP pivoting, lateral movement detection, and label harvesting.
      31
      1
      Apache 2.0

    • Vertex Cyber MCP

      Denisijcu
      F
      license
      Not graded
      quality
      C
      maintenance
      Enables local AI models to perform defensive cybersecurity analysis through narrowly scoped read-only tools for host posture, Windows security operations, file/IOC triage, code scanning, and allowlisted filesystem/network access while enforcing boundaries and audit trails.
      -

    • Windows Forensics MCP Server

      x746b
      A
      license
      B
      quality
      A
      maintenance
      Enables AI-assisted Windows digital forensics analysis including parsing Windows Event Logs (EVTX), analyzing registry hives (SAM, SYSTEM, SOFTWARE), and remotely collecting artifacts via WinRM with built-in security queries and forensic reference data.
      43
      21
      MIT

    • SOAR MCP Server

      wuzhi-dev
      A
      license
      Not graded
      quality
      D
      maintenance
      Integrates SOAR (Security Orchestration, Automation and Response) capabilities into AI clients, enabling security playbook execution, event management, and threat intelligence queries. Provides a complete security incident response platform through natural language interactions.
      MIT

    • Defender Hunt MCP

      Soucheff
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables security investigation and threat hunting through Microsoft Defender and Entra ID, with 31 tools for KQL queries, alerts, threat intelligence, identity investigation, and advanced threat hunting.
      MIT

    This server cannot be deployed

    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    Maintenance

    ActivitySlowing
    ResponsivenessWithin a week

    Resources