crowdsentinel-mcp-server provides an AI-augmented Model Context Protocol (MCP) server that connects to Elasticsearch and OpenSearch for threat hunting and incident response. It includes 139 built-in tools, over 6,000 detection rules mapped to MITRE ATT&CK, and behavioral baselining capabilities. Security teams can use it to accelerate investigations through natural language queries and automated analysis.
In the Security & compliance platforms space, crowdsentinel-mcp-server takes a focused approach. Manually querying and analyzing security events across large Elasticsearch/OpenSearch datasets without integrated AI assistance and standardized toolsets. crowdsentinel-mcp-server is an open-source project aimed at security analysts and SOC teams. The project is open source (GPL-3.0). The product ships for the command line and API, and it can be self-hosted.
thomasxm builds and maintains crowdsentinel-mcp-server, and the product first shipped in 2026. The project is developed in the open on GitHub with 203 stars and 133 commits in the last 90 days. Among its 4 catalogued features are Threat Hunting, Incident Response, and Detection Rules. It exposes integrations via an MCP server.
Latest indexed changes and source events
crowdsentinel-mcp-server verified by the PulseGate indexer
Other apps tracked under the same category.
