OsqueryMcpServer MCP Server

A complete implementation for integrating [Osquery](https://osquery.io/) with AI assistants, providing three approaches: an MCP server for Claude

Local serverstdio

What is the OsqueryMcpServer MCP server?

OsqueryMcpServer MCP server is a locally run integration for AI assistants that speak the Model Context Protocol. A complete implementation for integrating Osquery with AI assistants, providing three approaches: an MCP server for Claude Desktop, a Spring AI client, and a Claude Code skill for direct CLI usage.

What you get

This project enables AI assistants to answer system diagnostic questions like "Why is my fan running so hot?" or "What's using all my memory?" by translating natural language into Osquery SQL queries.

What the assistant can call

Once OsqueryMcpServer is connected, these are the calls the assistant has available:

  • Installation — The Installation tool exposed by this server

Configuration and credentials

  • Java 25+ (GraalVM CE 25 recommended for native image support) - Install via SDKMAN: sdk install java 25.0.2-graalce - Osquery installed and osqueryi available in your PATH - Gradle (or use the included Gradle wrapper)

Setting it up

Setup follows the usual MCP pattern — install or clone the server, register it in your client's configuration file, restart the client. The configuration blocks on this page cover the common clients.

Choosing this one

Among the developer tooling options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. OsqueryMcpServer's toolset — Installation — is a fair guide to whether it matches your workflow. It is maintained by kousen; worth a glance at recent repository activity before you build anything load-bearing on it.

SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.

Before you rely on it

  • It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
  • MCP clients confirm each tool call by default. Leave that on until you have watched what the osquerymcpserver mcp server does with a few real requests.

Available tools

ToolWhat it does
InstallationThe Installation tool exposed by this server.

How to install the OsqueryMcpServer MCP server

{
  "mcpServers": {
    "osquery": {
      "command": "java",
      "args": ["-jar", "path/to/osquery-mcp-server.jar"]
    }
  }
}

Configuration as documented by the project. Restart the client after saving.

Configuration

  • Java 25+ (GraalVM CE 25 recommended for native image support) - Install via SDKMAN: sdk install java 25.0.2-graalce - Osquery installed and osqueryi available in your PATH - Gradle (or use the included Gradle wrapper)

Example prompts to try

  • Use OsqueryMcpServer to Installation.

Frequently asked questions

It connects OsqueryMcpServer to MCP-compatible AI assistants such as Claude and Cursor, exposing 1 tool (Installation) that the assistant can call on your behalf. Instead of copying data back and forth by hand, the assistant works with OsqueryMcpServer directly.