A set of MCP servers for SecOps automation with Splunk SIEM queries, CrowdStrike EDR and MISP threat intelligence, with input sanitization.
接入配置
选择客户端，复制配置，再按项目文档补齐环境变量。
claude mcp add security-infrastructure-servers --env SPLUNK_HOST='<SPLUNK_HOST>' --env SPLUNK_TOKEN='<SPLUNK_TOKEN>' --env SPLUNK_VERIFY_SSL='<SPLUNK_VERIFY_SSL>' -- python /FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py~/.codex/config.toml
[mcp_servers.security-infrastructure-servers]
command = "python"
args = ["/FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py"]
env = { SPLUNK_HOST = "<SPLUNK_HOST>", SPLUNK_TOKEN = "<SPLUNK_TOKEN>", SPLUNK_VERIFY_SSL = "<SPLUNK_VERIFY_SSL>" }
# codex mcp add security-infrastructure-servers --env SPLUNK_HOST='<SPLUNK_HOST>' --env SPLUNK_TOKEN='<SPLUNK_TOKEN>' --env SPLUNK_VERIFY_SSL='<SPLUNK_VERIFY_SSL>' -- python /FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py~/.cursor/mcp.json
{
"mcpServers": {
"security-infrastructure-servers": {
"command": "python",
"args": [
"/FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py"
],
"env": {
"SPLUNK_HOST": "<SPLUNK_HOST>",
"SPLUNK_TOKEN": "<SPLUNK_TOKEN>",
"SPLUNK_VERIFY_SSL": "<SPLUNK_VERIFY_SSL>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"security-infrastructure-servers": {
"type": "stdio",
"command": "python",
"args": [
"/FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py"
],
"env": {
"SPLUNK_HOST": "<SPLUNK_HOST>",
"SPLUNK_TOKEN": "<SPLUNK_TOKEN>",
"SPLUNK_VERIFY_SSL": "<SPLUNK_VERIFY_SSL>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"security-infrastructure-servers": {
"command": "python",
"args": [
"/FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py"
],
"env": {
"SPLUNK_HOST": "<SPLUNK_HOST>",
"SPLUNK_TOKEN": "<SPLUNK_TOKEN>",
"SPLUNK_VERIFY_SSL": "<SPLUNK_VERIFY_SSL>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"security-infrastructure-servers": {
"command": "python",
"args": [
"/FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py"
],
"env": {
"SPLUNK_HOST": "<SPLUNK_HOST>",
"SPLUNK_TOKEN": "<SPLUNK_TOKEN>",
"SPLUNK_VERIFY_SSL": "<SPLUNK_VERIFY_SSL>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"security-infrastructure-servers": {
"command": "python",
"args": [
"/FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py"
],
"env": {
"SPLUNK_HOST": "<SPLUNK_HOST>",
"SPLUNK_TOKEN": "<SPLUNK_TOKEN>",
"SPLUNK_VERIFY_SSL": "<SPLUNK_VERIFY_SSL>"
}
}
}
}需要的环境变量
SPLUNK_HOSTSPLUNK_TOKENSPLUNK_VERIFY_SSL
把占位值换成你自己的密钥；不要把密钥提交到代码仓库。