CyberSim Pro MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| CYBERSIM_API_KEY | No | API key for securing the HTTP bridge; requires Authorization: Bearer <key> header. | |
| CYBERSIM_RUNTIME | No | Runtime mode selector used by wrapper scripts. | |
| CYBERSIM_IP_ALLOW | No | Comma-separated list of allowed IP addresses for the HTTP bridge. | |
| CYBERSIM_SCIM_TOKEN | No | Bearer token for SCIM v2 endpoints. | |
| CYBERSIM_RBAC_CONFIG | No | Path to a JSON role policy file for role-based access control. | |
| CYBERSIM_AUDIT_LOG_DIR | No | Directory for audit log files (default: ./logs/). | |
| CYBERSIM_APPROVAL_TOKEN | No | Shared secret required for restricted tools (simulate_attack, stop_simulation, replay_telemetry). | |
| CYBERSIM_AUDIT_CHAIN_ID | No | Identifier for multi-tenant audit chain tracking. | |
| CYBERSIM_AUDIT_HMAC_KEY | No | HMAC key for hash-chained audit logging. | |
| CYBERSIM_AUDIT_SEAL_KEY | No | Key for signing exported audit seals; can reuse the HMAC key. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| create_scenarioC | Create a cybersecurity training scenario with customizable parameters |
| simulate_attackC | Simulate a cyberattack with realistic attack vectors and TTPs |
| analyze_networkC | Analyze network traffic and identify potential security issues |
| investigate_incidentB | Conduct incident response investigation with timeline reconstruction |
| forensics_analysisC | Perform digital forensics analysis on system artifacts |
| generate_reportC | Generate comprehensive security assessment or incident reports |
| stop_simulationA | Manually stop one or more active simulations for safety or compliance |
| replay_telemetryC | Replay lab telemetry (PCAP/EDR/SIEM exports) against a simulation to identify coverage gaps |
| list_metricsB | Summarise historical exercise metrics and readiness trends |
| export_controlsA | Export recommended compensating controls derived from CyberSim analyses |
| sync_risk_registerB | Generate payloads for updating enterprise risk registers (ServiceNow, Archer, OneTrust) |
| generate_validation_reportA | Produce an auditor-facing validation digest of recent CyberSim activity |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/kayembahamid/cybersim-pro'
If you have feedback or need assistance with the MCP directory API, please join our Discord server