Back to Browse

Alertlogic MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for Alert Logic MDR — incident response, log search, SOAR, and SOC workflows

About

MCP server for Alert Logic MDR — incident response, log search, SOAR, and SOC workflows

Security Report

4.2
Use Caution4.2High Risk

AlertLogic MCP server is a well-structured integration for the AlertLogic MDR platform with comprehensive authentication, proper credential handling, and appropriate permission scoping. The codebase demonstrates good security practices including AIMS token caching, environment variable-based configuration, and built-in access control mechanisms (read-only mode, destructive operation gating). Minor code quality observations around error handling and input validation do not materially impact security posture for this use case. Supply chain analysis found 9 known vulnerabilities in dependencies (0 critical, 4 high severity). Package verification found 1 issue.

4 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

What You'll Need

Set these up before or after installing:

API key in access_key_id:secret_key format (see below for how to create one)Optional

Environment variable: ALERTLOGIC_API_KEY

API base URL — https://api.cloudinsight.alertlogic.com (US) or https://api.cloudinsight.alertlogic.co.uk (UK)Optional

Environment variable: ALERTLOGIC_BASE_URL

Your AlertLogic account ID (visible in the console URL and account settings)Optional

Environment variable: ALERTLOGIC_ACCOUNT_ID

stdioOptional

Environment variable: MCP_TRANSPORT

127.0.0.1Optional

Environment variable: MCP_HOST

8000Optional

Environment variable: MCP_PORT

_(off)_Optional

Environment variable: ALERTLOGIC_MCP_READONLY

_(off)_Optional

Environment variable: ALERTLOGIC_MCP_ALLOW_DESTRUCTIVE

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-rijul170-alertlogic-mcp": {
      "env": {
        "MCP_HOST": "your-mcp-host-here",
        "MCP_PORT": "your-mcp-port-here",
        "MCP_TRANSPORT": "your-mcp-transport-here",
        "ALERTLOGIC_API_KEY": "your-alertlogic-api-key-here",
        "ALERTLOGIC_BASE_URL": "your-alertlogic-base-url-here",
        "ALERTLOGIC_ACCOUNT_ID": "your-alertlogic-account-id-here",
        "ALERTLOGIC_MCP_READONLY": "your-alertlogic-mcp-readonly-here",
        "ALERTLOGIC_MCP_ALLOW_DESTRUCTIVE": "your-alertlogic-mcp-allow-destructive-here"
      },
      "args": [
        "alertlogic-mcp"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!

Alertlogic MCP Server - MCP server for Alert Logic MDR — incident response, log | MCP Marketplace