MCP 插件

配置方法

• 运行 MCP Server

python PLUGINS/MCP/mcpserver.py

支持指定host,port,和uuid

python PLUGINS/MCP/mcpserver.py --host 10.10.10.10 --port 7001 --uuid thisisjustfortest

• 配置 MCP SSE URL 脚本会将 MCP SSE 的 URL 输出 (配置 ClaudeCode 插件 时需要)

mcp server url: http://10.10.10.10:7001/thisisjustfortest/sse
INFO:     Started server process [13828]
INFO:     Waiting for application startup.
INFO:     Application startup complete.
INFO:     Uvicorn running on http://10.10.10.10:7001 (Press CTRL+C to quit)

当前支持的Tools

REGISTERED_MCP_TOOLS = [

    # case
    list_cases,
    update_case,

    # alert
    list_alerts,

    # artifact
    list_artifacts,

    # enrichment
    create_enrichment,

    # playbook
    list_playbook_definitions,
    execute_playbook,
    list_playbook_runs,

    # knowledge
    update_knowledge,
    search_knowledge,

    # SIEM
    get_current_time,
    siem_explore_schema,
    siem_adaptive_query,
    siem_keyword_search,
    siem_discover_index_fields,

    # Threat Intelligence
    ti_query,

    # Stream Debug
    read_stream_message_by_id,
    read_stream_head,

]