Overview
What is santa-mcp?
santa-mcp is a Proof of Concept (PoC) Model Context Protocol (MCP) server for Santa, a security tool from North Pole Security. It allows an LLM with an MCP client to connect and drive Santa, enabling querying and control via natural language.
How to use santa-mcp?
Install Claude Desktop, run make to build the binary, copy it to a known path, and edit claude_desktop_config.json to point to the binary. Copy that config to ~/Library/Application Support/Claude/ and open Claude Desktop — four tools become available: santactl_fileinfo, santactl_status, santactl_sync, and santactl_version. You can then ask questions like "Why is Santa blocking osascript?"
Key features of santa-mcp
- Provides four tools to interact with Santa.
- Proof of Concept, not production-ready.
- Uses MCP Golang library.
- Integrates with Claude Desktop.
- Allows querying why Santa blocks actions.
- Connects and drives Santa via an LLM.
Use cases of santa-mcp
- Ask Santa for detailed information about a file.
- Check Santa’s current operational status.
- Trigger a sync operation in Santa.
- Verify the installed Santa version.
- Investigate why a specific action is being blocked.
FAQ from santa-mcp
Is santa-mcp production-ready?
No, it is a proof of concept demonstration and is not production-ready.
What tools does santa-mcp expose?
It exposes four tools: santactl_fileinfo, santactl_status, santactl_sync, and santactl_version.
What are the dependencies for santa-mcp?
santa-mcp depends on the MCP Golang library.
Is santa-mcp officially supported by North Pole Security?
No, it is not an officially supported product of North Pole Security.
How do I install santa-mcp?
Install Claude Desktop, run make to build the binary, copy it to your system, configure claude_desktop_config.json to point to the binary, and copy that config to ~/Library/Application Support/Claude/.
