MCP server: 23 SOC tools for external AI clients
A Model Context Protocol server exposes 23 tools (alerts, investigation, incidents, IOC enrichment, UEBA, dark-web checks, compliance, SOAR playbooks, threat hunts, agent control, analyst chat, vulnerability scans) to any MCP-capable client.
Status
Configurable
Built and ready. Bring your own keys, models or connected systems and it works; without them it stays idle.
Good to know
Needs a token and a reachable ThirdEYE API. No automated test for this server in the repository.
See it on your own alerts.
Book a walkthrough with the team. We will show the platform end to end, tell you what is production-ready and what is not, and discuss how it would sit next to your existing SIEM.