santa-mcp

What is santa-mcp?

santa-mcp is a Proof of Concept (PoC) Model Context Protocol (MCP) server for Santa, a security tool from North Pole Security. It allows an LLM with an MCP client to connect and drive Santa, enabling querying and control via natural language.

How to use santa-mcp?

Install Claude Desktop, run make to build the binary, copy it to a known path, and edit claude_desktop_config.json to point to the binary. Copy that config to ~/Library/Application Support/Claude/ and open Claude Desktop — four tools become available: santactl_fileinfo, santactl_status, santactl_sync, and santactl_version. You can then ask questions like "Why is Santa blocking osascript?"

Key features of santa-mcp

• Provides four tools to interact with Santa.
• Proof of Concept, not production-ready.
• Uses MCP Golang library.
• Integrates with Claude Desktop.
• Allows querying why Santa blocks actions.
• Connects and drives Santa via an LLM.

Use cases of santa-mcp

• Ask Santa for detailed information about a file.
• Check Santa’s current operational status.
• Trigger a sync operation in Santa.
• Verify the installed Santa version.
• Investigate why a specific action is being blocked.

FAQ from santa-mcp

Is santa-mcp production-ready?

No, it is a proof of concept demonstration and is not production-ready.

What tools does santa-mcp expose?

It exposes four tools: santactl_fileinfo, santactl_status, santactl_sync, and santactl_version.

What are the dependencies for santa-mcp?

santa-mcp depends on the MCP Golang library.

Is santa-mcp officially supported by North Pole Security?

No, it is not an officially supported product of North Pole Security.

How do I install santa-mcp?

Install Claude Desktop, run make to build the binary, copy it to your system, configure claude_desktop_config.json to point to the binary, and copy that config to ~/Library/Application Support/Claude/.