HotStack

← Back to browse

crowdsentinel-mcp-server

Indexed by io.github.thomasxm
View source ↗

About

AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics

Use this server

Add it to your MCP client. The catalogue lists this config verbatim from its source — it does not run, download, or vouch for the server. Review the command before you run it.

Transportstdio (runs a local command)
Env varsELASTICSEARCH_HOSTS ELASTICSEARCH_CLOUD_ID ELASTICSEARCH_API_KEY ELASTICSEARCH_USERNAME ELASTICSEARCH_PASSWORD ELASTICSEARCH_BEARER_TOKEN VERIFY_CERTS REQUEST_TIMEOUT
Claude Code 
claude mcp add --env ELASTICSEARCH_HOSTS= --env ELASTICSEARCH_CLOUD_ID= --env ELASTICSEARCH_API_KEY= --env ELASTICSEARCH_USERNAME= --env ELASTICSEARCH_PASSWORD= --env ELASTICSEARCH_BEARER_TOKEN= --env VERIFY_CERTS= --env REQUEST_TIMEOUT= crowdsentinel-mcp-server -- uvx crowdsentinel-mcp-server
Cursor

Add to Cursor

If the button doesn't open Cursor, use the JSON below — Cursor accepts the same mcpServers config.

VS Code 
code --add-mcp '{"name":"crowdsentinel-mcp-server","command":"uvx","args":["crowdsentinel-mcp-server"],"env":{"ELASTICSEARCH_HOSTS":"","ELASTICSEARCH_CLOUD_ID":"","ELASTICSEARCH_API_KEY":"","ELASTICSEARCH_USERNAME":"","ELASTICSEARCH_PASSWORD":"","ELASTICSEARCH_BEARER_TOKEN":"","VERIFY_CERTS":"","REQUEST_TIMEOUT":""}}'
JSON 
{
  "mcpServers": {
    "crowdsentinel-mcp-server": {
      "command": "uvx",
      "args": [
        "crowdsentinel-mcp-server"
      ],
      "env": {
        "ELASTICSEARCH_HOSTS": "",
        "ELASTICSEARCH_CLOUD_ID": "",
        "ELASTICSEARCH_API_KEY": "",
        "ELASTICSEARCH_USERNAME": "",
        "ELASTICSEARCH_PASSWORD": "",
        "ELASTICSEARCH_BEARER_TOKEN": "",
        "VERIFY_CERTS": "",
        "REQUEST_TIMEOUT": ""
      }
    }
  }
}

Environment variables are listed by name only — fill in your own values. Entries never carry secrets.