"Search for 'Security'" matching MCP servers:

Enables LLMs to interact with Kibana through composable toolboxes for building dashboards, managing data, and handling alerts, among other operations.

Enables AI agents to interact seamlessly with Splunk environments through 20+ tools for search, analytics, data discovery, administration, and health monitoring. Features AI-powered troubleshooting workflows and supports multiple Splunk instances with production-ready security.

Perimeter security for your AI Infrastructure.

Enables transparent security for any MCP server by intercepting tool calls, blocking prompt injection attempts, masking PII in responses, and writing immutable audit logs.

Enforces security policies between AI assistants and Splunk by inspecting every search, mapping users to roles, and requiring human approval for write actions.

It enables agents to discover Rapid7 InsightIDR log sets and logs, run LEQL searches and analytics, and follow paginated results for natural-language investigations.

MCP server for safely exposing SQL Server database capabilities to LLM clients, with read-only mode, security features, and observability.

Enables secure interaction between LLMs and MCP tools by applying zero-trust security controls, including sensitive data masking, file system protection, and policy enforcement.

Brings the full AlertLogic MDR platform into AI assistants, exposing 473+ tools for incident response, log search, SOAR automation, and multi-account security operations at MSSP scale.

Bridges AI assistants with Wazuh SIEM infrastructure, providing natural language access to security alerts, vulnerability analysis, CVE databases, and network documentation for security operations.

A safety layer and monitoring copilot for AI agents using Splunk MCP, recording tool calls, enforcing policies, and blocking risky actions.

Provides tools to search Splunk logs, inject test data, and send triage emails, enabling AI-driven incident investigation.

An MCP server for Security Onion Community Edition that provides 21 read and write tools for SOC operations, including event querying, alert management, detection tuning, PCAP retrieval, and agent enrollment, without requiring a Pro license.

Enables governed agent access to Cortex XSIAM security operations APIs, including XQL log search, issues, cases, endpoints, and assets, with dataset authorization and optional identity-based access control.

Provides Model Context Protocol access to the Dynatrace platform API, letting AI agents run live queries against observability, security, and platform data and manage a Dynatrace environment. It is hosted remotely by Dynatrace, so MCP hosts can add it by name from the official registry without installing anything.

Enables querying and analyzing Falco security events from Falcosidekick UI through MCP tools. Supports filtering events by time windows and retrieving full event details for security monitoring and incident investigation.

A remote, Dynatrace-hosted MCP server that gives AI agents live API access to your Dynatrace environment. It enables querying and analyzing observability, security, and platform data — such as DQL queries, logs, traces, problems, and dashboards — so agents can act on production context instead of static knowledge.

Enables ingestion and full-text search of Windows application logs via MCP tools. Supports dual-backend indexing with Elasticsearch and SQLite for fast retrieval.

An MCP server for querying Grafana Loki directly with a discovery-first workflow — labels, values, series, and LogQL queries without requiring Grafana.

Enables classification of GPU workloads as training, inference, or idle from telemetry data, with tools for one-shot classification, benchmarking, and audit log verification.