IR Toolshed MCP Server

@rossja

リポジトリ

基本情報

カテゴリ

その他

ライセンス

Apache-2.0

トランスポート

stdio

作者

rossja

IR Toolshed MCP Server について

an MCP server providing tools for network incident response folks

IR Toolshed MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "irtoolshed-mcp-server": {
      "command": "uv",
      "args": [
        "venv"
      ]
    }
  }
}

IR Toolshed MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is IR Toolshed MCP Server?

IR Toolshed MCP Server is a comprehensive Model Context Protocol (MCP) server that provides incident response and network analysis tools for security professionals. It enables AI agents like Claude to perform network-related lookups and analyses to assist with security investigations.

How to use IR Toolshed MCP Server?

Clone the repository, create a virtual environment with uv venv, activate it, then install the package with uv pip install -e .. Start the server using uv run mcp dev src/mcp_server.py. For IP geolocation, set the MAXMIND_LICENSE_KEY environment variable or provide it as a parameter when using the tool.

Key features of IR Toolshed MCP Server

ASN lookup for IP addresses
DNS lookup (A, AAAA, MX, NS, TXT)
WHOIS record retrieval for domains
IP geolocation via MaxMind GeoLite2
Consistent error handling across all tools
Detailed documentation as resources for AI agents

Use cases of IR Toolshed MCP Server

Investigating suspicious IP addresses during incident response
Verifying domain ownership and registration details
Enriching threat intelligence with geolocation data
Automating DNS and WHOIS lookups in security workflows

よくある質問

What is IR Toolshed MCP Server?

It is an MCP server that exposes networking and security tools (ASN, DNS, WHOIS, geolocation) as callable resources for AI agents, designed for security professionals.

What are the prerequisites to run it?

Python 3.8 or newer (3.13+ recommended) and the `uv` package manager. The geolocation tool additionally requires a free MaxMind license key.

How do I obtain a MaxMind license key?

Visit https://dev.maxmind.com/geoip/geolite2-free-geolocation-data to get a free key. Set it as the `MAXMIND_LICENSE_KEY` environment variable or provide it each time you use the geolocation tool.

What happens when a lookup fails?

Each tool returns a structured error response with a status of "error", a detailed error message, and the original query value, enabling graceful handling by AI agents.

Does the server require an internet connection?

Yes, ASN, DNS, and WHOIS lookups require network access to external services. The geolocation tool uses a local MaxMind database but still needs an internet connection to download the database initially.

「その他」の他のコンテンツ

MCP Toolbox for Databases

googleapis

MCP Toolbox for Databases is an open source MCP server for databases.

15.9K

Health by Dr Brad

Dr Brad Stanfield

Health by Dr Brad works out a health plan from your own results: which screening is due at your age, and evidence-based suggestions, each with the reason and the published guideline or study behind it. Your record is one