MCP Server
MCP
io.github.thomasxm/crowdsentinel-mcp-server
AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics
Install
uvx crowdsentinel-mcp-server
Configuration Example
{
"remotes": [],
"packages": [
{
"registryType": "pypi",
"identifier": "crowdsentinel-mcp-server",
"version": "0.6.0",
"transport": {
"type": "stdio"
},
"environmentVariables": [
{
"description": "Comma-separated Elasticsearch hosts. Supports HTTP/HTTPS, local/remote/cloud (e.g., http://localhost:9200, https://es.prod.example.com:9200)",
"format": "string",
"default": "https://localhost:9200",
"name": "ELASTICSEARCH_HOSTS"
},
{
"description": "Elastic Cloud deployment ID (alternative to ELASTICSEARCH_HOSTS for cloud deployments)",
"format": "string",
"name": "ELASTICSEARCH_CLOUD_ID"
},
{
"description": "API key for authentication (recommended for production and Elastic Cloud)",
"format": "string",
"isSecret": true,
"name": "ELASTICSEARCH_API_KEY"
},
{
"description": "Username for basic authentication (alternative to API key)",
"format": "string",
"name": "ELASTICSEARCH_USERNAME"
},
{
"description": "Password for basic authentication (used with ELASTICSEARCH_USERNAME)",
"format": "string",
"isSecret": true,
"name": "ELASTICSEARCH_PASSWORD"
},
{
"description": "Bearer/service token for authentication (alternative to API key)",
"format": "string",
"isSecret": true,
"name": "ELASTICSEARCH_BEARER_TOKEN"
},
{
"description": "TLS certificate verification: true (verify CA — production), false (skip — dev/test), or /path/to/ca.crt (custom CA)",
"format": "string",
"default": "false",
"name": "VERIFY_CERTS"
},
{
"description": "Request timeout in seconds (e.g., 60 or 10.5)",
"format": "string",
"name": "REQUEST_TIMEOUT"
}
]
}
]
}
mcp
model-context-protocol
pypi
By
Comments
Sign in to leave a comment