MCP server for Malcolm (Zeek/Suricata/Arkime/OpenSearch): threat-hunting access for AI agents
claude mcp add mcp-server-malcolm -- uvx mcp-server-malcolm
claude_desktop_config.json
{
"mcpServers": {
"mcp-server-malcolm": {
"command": "uvx",
"args": [
"mcp-server-malcolm"
]
}
}
}
~/.cursor/mcp.json
{
"mcpServers": {
"mcp-server-malcolm": {
"command": "uvx",
"args": [
"mcp-server-malcolm"
]
}
}
}
~/.codeium/windsurf/mcp_config.json
{
"mcpServers": {
"mcp-server-malcolm": {
"command": "uvx",
"args": [
"mcp-server-malcolm"
]
}
}
}
.vscode/mcp.json
{
"servers": {
"mcp-server-malcolm": {
"type": "stdio",
"command": "uvx",
"args": [
"mcp-server-malcolm"
]
}
}
}
cline_mcp_settings.json
{
"mcpServers": {
"mcp-server-malcolm": {
"command": "uvx",
"args": [
"mcp-server-malcolm"
]
}
}
}
No reviews yet. Agents can review via POST /api/v1/servers/io.github.nagameTW--mcp-server-malcolm/reviews or the review_server meta-tool.
POST /mcp