crowdsec-ops-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| LOG_LEVEL | No | Python log level, defaults to `INFO`. | |
| CSCLI_PATH | No | Command name/path used only when formatting prepared `potential_cscli_command` text. The MCP does not run `cscli`. | |
| DEFAULT_WINDOW | No | Default lookback window, defaults to `24h`. | |
| CROWDSEC_LAPI_KEY | Yes | CrowdSec LAPI key for decision reads. | |
| CROWDSEC_LAPI_URL | Yes | CrowdSec LAPI base URL. Required for supported read operation. | |
| WRITE_AUDIT_LOG_PATH | No | JSON Lines audit trail for prepared write intents, defaults to `crowdsec-write-audit.jsonl`. |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| crowdsec_healthA | Report read-only CrowdSec MCP backend health, configuration presence, and exposed capabilities without exposing secrets. |
| inspect_ipB | Inspect CrowdSec decisions and CrowdSec alerts for one IP. |
| security_summaryC | Summarize recent CrowdSec decisions and alerts. |
| top_offendersB | Return top source IPs by recent CrowdSec alert volume. |
| recent_crowdsec_decisionsC | Return active CrowdSec decisions. |
| decision_inventoryA | Summarize active CrowdSec decisions with filters, grouped counts, expiry views, and representative rows. |
| recent_crowdsec_alertsB | Return recent CrowdSec alerts. |
| suggest_scenarioB | Suggest a CrowdSec scenario proposal from repeated CrowdSec patterns. |
| unban_ipA | Prepare and audit a potential cscli command to delete a CrowdSec decision for one IP. The MCP does not execute it. |
| allow_ipA | Prepare and audit a potential cscli command to add a temporary allow decision for one IP. The MCP does not execute it. |
| ban_ipA | Prepare and audit a potential cscli command to add a CrowdSec ban decision for one IP. The MCP does not execute it. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/frli4797/crowdsec-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server