Santa MCP Server

What is santa-mcp?

santa-mcp is a Proof of Concept (PoC) Model Context Protocol (MCP) server for Santa, a security tool from North Pole Security. It allows an LLM with an MCP client to connect and drive Santa, enabling querying and control via natural language.

How to use santa-mcp?

Install Claude Desktop, run make to build the binary, copy it to a known path, and edit claude_desktop_config.json to point to the binary. Copy that config to ~/Library/Application Support/Claude/ and open Claude Desktop — four tools become available: santactl_fileinfo, santactl_status, santactl_sync, and santactl_version. You can then ask questions like "Why is Santa blocking osascript?"

Key features of santa-mcp

• Provides four tools to interact with Santa.
• Proof of Concept, not production-ready.
• Uses MCP Golang library.
• Integrates with Claude Desktop.
• Allows querying why Santa blocks actions.
• Connects and drives Santa via an LLM.

Use cases of santa-mcp

• Ask Santa for detailed information about a file.
• Check Santa’s current operational status.
• Trigger a sync operation in Santa.
• Verify the installed Santa version.
• Investigate why a specific action is being blocked.