Security Infrastructure MCP Servers

Name: Security Infrastructure MCP Servers
Author: jmstar85

jmstar85

A set of MCP servers for SecOps automation with Splunk SIEM queries, CrowdStrike EDR and MISP threat intelligence, with input sanitization.

Setup

Choose your client, copy the config, then fill in any required environment variables.

Add to Cursor Add to VS Code

claude mcp add security-infrastructure-servers --env SPLUNK_HOST='<SPLUNK_HOST>' --env SPLUNK_TOKEN='<SPLUNK_TOKEN>' --env SPLUNK_VERIFY_SSL='<SPLUNK_VERIFY_SSL>' -- python /FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py

~/.codex/config.toml

[mcp_servers.security-infrastructure-servers]
command = "python"
args = ["/FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py"]
env = { SPLUNK_HOST = "<SPLUNK_HOST>", SPLUNK_TOKEN = "<SPLUNK_TOKEN>", SPLUNK_VERIFY_SSL = "<SPLUNK_VERIFY_SSL>" }

# codex mcp add security-infrastructure-servers --env SPLUNK_HOST='<SPLUNK_HOST>' --env SPLUNK_TOKEN='<SPLUNK_TOKEN>' --env SPLUNK_VERIFY_SSL='<SPLUNK_VERIFY_SSL>' -- python /FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py

~/.cursor/mcp.json

{
  "mcpServers": {
    "security-infrastructure-servers": {
      "command": "python",
      "args": [
        "/FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py"
      ],
      "env": {
        "SPLUNK_HOST": "<SPLUNK_HOST>",
        "SPLUNK_TOKEN": "<SPLUNK_TOKEN>",
        "SPLUNK_VERIFY_SSL": "<SPLUNK_VERIFY_SSL>"
      }
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "security-infrastructure-servers": {
      "type": "stdio",
      "command": "python",
      "args": [
        "/FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py"
      ],
      "env": {
        "SPLUNK_HOST": "<SPLUNK_HOST>",
        "SPLUNK_TOKEN": "<SPLUNK_TOKEN>",
        "SPLUNK_VERIFY_SSL": "<SPLUNK_VERIFY_SSL>"
      }
    }
  }
}

~/.gemini/settings.json

{
  "mcpServers": {
    "security-infrastructure-servers": {
      "command": "python",
      "args": [
        "/FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py"
      ],
      "env": {
        "SPLUNK_HOST": "<SPLUNK_HOST>",
        "SPLUNK_TOKEN": "<SPLUNK_TOKEN>",
        "SPLUNK_VERIFY_SSL": "<SPLUNK_VERIFY_SSL>"
      }
    }
  }
}

claude_desktop_config.json

{
  "mcpServers": {
    "security-infrastructure-servers": {
      "command": "python",
      "args": [
        "/FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py"
      ],
      "env": {
        "SPLUNK_HOST": "<SPLUNK_HOST>",
        "SPLUNK_TOKEN": "<SPLUNK_TOKEN>",
        "SPLUNK_VERIFY_SSL": "<SPLUNK_VERIFY_SSL>"
      }
    }
  }
}

.trae/mcp.json

{
  "mcpServers": {
    "security-infrastructure-servers": {
      "command": "python",
      "args": [
        "/FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py"
      ],
      "env": {
        "SPLUNK_HOST": "<SPLUNK_HOST>",
        "SPLUNK_TOKEN": "<SPLUNK_TOKEN>",
        "SPLUNK_VERIFY_SSL": "<SPLUNK_VERIFY_SSL>"
      }
    }
  }
}

Environment variables

SPLUNK_HOST
SPLUNK_TOKEN
SPLUNK_VERIFY_SSL

Replace the placeholders with your own credentials and keep them out of version control.

Setup

Environment variables

Related