crowdsentinel-mcp-server
crowdsentinel-mcp-server provides an AI-augmented Model Context Protocol (MCP) server that connects to Elasticsearch and OpenSearch for threat hunting and incident response. It includes 139 built-in tools, over 6,000 detection rules mapped to MITRE ATT&CK, and behavioral baselining capabilities. Security teams can use it to accelerate investigations through natural language queries and automated analysis.
Overview
4 featuresIn the Security & compliance platforms space, crowdsentinel-mcp-server takes a focused approach. Manually querying and analyzing security events across large Elasticsearch/OpenSearch datasets without integrated AI assistance and standardized toolsets. crowdsentinel-mcp-server is an open-source project aimed at security analysts and SOC teams. crowdsentinel-mcp-server is open source under the GPL-3.0 license. It ships for the command line and API, and it can be self-hosted.
It is developed by thomasxm, and it first shipped in 2026. Development happens publicly on GitHub with 203 stars and 133 commits in the last 90 days. Among its 4 catalogued features are Threat Hunting, Incident Response, and Detection Rules. It exposes integrations via an MCP server.
Summary written by a language model from the project’s public pages.
- Threat Hunting
- Incident Response
- Detection Rules
- Baseline Analysis
Built with & integrations
Trust & compliance
Indexing history
1What PulseGate has recorded for this listing
- Indexed19 Jul · 21:15 UTCcrowdsentinel-mcp-server verified against its public sourceSource: PulseGate · Open
Frequently asked questions about crowdsentinel-mcp-server
- What is crowdsentinel-mcp-server?
- Manually querying and analyzing security events across large Elasticsearch/OpenSearch datasets without integrated AI assistance and standardized toolsets. It is catalogued under Security & compliance platforms on PulseGate.
- Who should use crowdsentinel-mcp-server?
- crowdsentinel-mcp-server is an open-source project built for security analysts and SOC teams.
- Is crowdsentinel-mcp-server free?
- Yes — crowdsentinel-mcp-server is open source under the GPL-3.0 license and free to use.
- What platforms does crowdsentinel-mcp-server run on?
- crowdsentinel-mcp-server runs on the command line and API. It can also be self-hosted.
- Is crowdsentinel-mcp-server still active?
- The GitHub repository shows 133 commits in the last 90 days.
- What projects are similar to crowdsentinel-mcp-server?
- Similar projects tracked by PulseGate include mcp-server-sentinel, sentinel-mcp-server, and mcp-sentinel-proxy.mcp-server-sentinelsentinel-mcp-servermcp-sentinel-proxy
- Who develops crowdsentinel-mcp-server?
- crowdsentinel-mcp-server is developed by thomasxm.
- How long has crowdsentinel-mcp-server been around?
- crowdsentinel-mcp-server first shipped in 2026.
Similar projects
Closest matches by what these projects do