Cribl MCP Server

Cribl MCP Server

Local serverstdio

What is the Cribl MCP Server?

Cribl MCP Server

The short version

A Model Context Protocol (MCP) server that enables AI interactions with the Cribl API.

The tools it exposes

The server publishes 5 tools. What each one is for:

  • Prompt — what sources are we ingesting?
  • Response — "Let me examine the functions that are processing the Palo Alto traffic in more detail:
  • Filter — sourcetype!='pan:traffic'
  • Description — Short-circuits (skips) all events that are NOT of sourcetype 'pan'
  • Prerequisites — You can install Node.js from https://nodejs.org

What it needs from you

To run this server ensure the following: - Node.js is installed (version 16 or later recommended) - Internet access is available (to fetch the MCP server package from npm) You can install Node.js from https://nodejs.org. To verify your setup:

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

How to install the Cribl MCP Server

{
  "mcpServers": {
    "cribl": {
      "command": "npx",
      "args": ["-y", "@pebbletek/cribl-mcp"],
      "env": {
        "CRIBL_BASE_URL": "your-value",
        "CRIBL_CLIENT_ID": "your-value",
        "CRIBL_CLIENT_SECRET": "your-value"
      }
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Configuration

To run this server ensure the following: - Node.js is installed (version 16 or later recommended) - Internet access is available (to fetch the MCP server package from npm) You can install Node.js from https://nodejs.org. To verify your setup:

VariableDescriptionRequired
CRIBL_BASE_URLEndpoint or connection string the server talks to.Yes
CRIBL_CLIENT_IDConfiguration value read at startup.Optional
CRIBL_CLIENT_SECRETCredential the server authenticates with.Yes

Example prompts to try

  • “Use Cribl to Prompt.”
  • “Use Cribl to Response.”
  • “Use Cribl to Filter.”

Frequently asked questions

Node.js version 16 or later and internet access (to fetch the package from npm).