mcp-server-malcolm

Indexed by io.github.nagameTW

About

MCP server for Malcolm (Zeek/Suricata/Arkime/OpenSearch): threat-hunting access for AI agents

Use this server

Add it to your MCP client. The catalogue lists this config verbatim from its source — it does not run, download, or vouch for the server. Review the command before you run it.

Transportstdio (runs a local command)

Claude Code

claude mcp add mcp-server-malcolm -- uvx mcp-server-malcolm

Cursor

Add to Cursor

If the button doesn't open Cursor, use the JSON below — Cursor accepts the same mcpServers config.

VS Code

code --add-mcp '{"name":"mcp-server-malcolm","command":"uvx","args":["mcp-server-malcolm"]}'

JSON

{
  "mcpServers": {
    "mcp-server-malcolm": {
      "command": "uvx",
      "args": [
        "mcp-server-malcolm"
      ]
    }
  }
}