SuricataMCP

Name: SuricataMCP
Author: Medinios

@Medinios

About SuricataMCP

SuricataMCP is a Model Context Protocol Server that allows MCP clients to autonomously use suricata for network traffic analysis. It enables programmatic interaction with Suricata through tools like get_suricata_version, get_suricata_help, and get_alerts_from_pcap_file.

Basic information

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "SuricataMcp": {
      "command": "cmd",
      "args": [
        "/c",
        "mcp",
        "run",
        "suricata-mcp.py"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is SuricataMCP?

SuricataMCP is a Model Context Protocol (MCP) server that enables MCP clients to autonomously use Suricata for network traffic analysis. It provides programmatic tools to query Suricata version, access help, and retrieve alerts from PCAP files.

How to use SuricataMCP?

Use SuricataMCP by connecting an MCP client and calling its exposed tools: get_suricata_version, get_suricata_help, and get_alerts_from_pcap_file. No installation or configuration steps are described in the README.