Security Onion MCP (Community Edition)
Security & Monitoring
Remote
An MCP server for Security Onion Community Edition that provides 21 read and write tools for SOC operations, including event querying, alert management, detection tuning, PCAP retrieval, and agent enrollment, without requiring a Pro license.
How to connect
1
Glama registry
View https://glama.ai/mcp/servers/b5gbyzmdb7 for deploy options, or install from https://github.com/rudraverma/securityonion-CE-mcp (see README for MCP config).
2
GitHub
Install from https://github.com/rudraverma/securityonion-CE-mcp and add the server to your MCP client configuration (see repository README).
Tools
Tool names are not listed in our registry for this server. Connect it in your MCP client to see the live tool list.