How do I install the securityinfrastructure mcp server?

Use a recorded configuration for your client, replace example credential values and paths, and verify the documented runtime. Restart or reconnect the client, then inspect the available tools.

What credentials does it need?

The recorded environment keys are `SPLUNK_HOST`, `SPLUNK_TOKEN`, `SPLUNK_VERIFY_SSL`. Keep credentials outside committed files and confirm the configuration required by your installed version.

SSyncDev

Start a project

SecurityInfrastructure MCP Server

A comprehensive collection of **secure** MCP (Model Context Protocol) server implementations for security platform integrations with enterprise-grade

Local serverstdioPython

What is the SecurityInfrastructure MCP Server?

A comprehensive collection of secure MCP (Model Context Protocol) server implementations for security platform integrations with enterprise-grade security

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
search-events	Execute sanitized SPL queries with injection prevention
search-detections	Query detections with FQL validation and whitelisting
search-attributes	Search IOCs with XSS and injection prevention

How to install the SecurityInfrastructure MCP Server

{
  "mcpServers": {
    "security-infrastructure-splunk": {
      "command": "python",
      "args": [
        "/FULL/PATH/TO/SecurityInfrastructure/src/splunk_server.py"
      ],
      "env": {
        "SPLUNK_HOST": "REPLACE_WITH_YOUR_SPLUNK_HOST",
        "SPLUNK_TOKEN": "YOUR_SPLUNK_TOKEN",
        "SPLUNK_VERIFY_SSL": "true"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

Variable	Description	Required
SPLUNK_HOST	Declared in the maintainer’s client configuration.	Check documentation
SPLUNK_TOKEN	Declared in the maintainer’s client configuration.	Check documentation
SPLUNK_VERIFY_SSL	Declared in the maintainer’s client configuration.	Check documentation

Example prompts to try

“Use SecurityInfrastructure to search-events.”
“Use SecurityInfrastructure to search-detections.”
“Use SecurityInfrastructure to search-attributes.”

Frequently asked questions

A comprehensive collection of **secure** MCP (Model Context Protocol) server implementations for security platform integrations with enterprise-grade security Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.