MCP server · source category: Security

nagameTW/mcp-server-malcolm

The first MCP server for Malcolm, the open-source network traffic analysis suite (Zeek + Suricata + Arkime + OpenSearch +…

The first MCP server for Malcolm, the open-source network traffic analysis suite (Zeek + Suricata + Arkime + OpenSearch + NetBox). Gives AI agents structured, threat-hunting access: search and aggregate traffic, discover fields, query Suricata alerts, browse Arkime sessions, and resolve NetBox assets. Read-only by default; opt-in, audited write classes for alerts, tagging, hunts, and PCAP upload. pip install mcp-server-malcolm

Open documentation ↗

Record

Type
MCP server
Category
Security & Identity
Authentication
No authentication
Pricing
Free

Fields are reproduced from the source registry as-is. “Unknown” means the source did not describe the field — it is not an inference. See the methodology for how records are collected and normalised.

Browse all Security & Identity MCP servers.