How do I install Huntress?

Huntress is a local plugin. Install it using the provided package and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

What credentials does Huntress need?

Huntress requires the following credentials or environment variables: HUNTRESS_API_KEY, HUNTRESS_API_SECRET, MCP_TRANSPORT, AUTH_MODE, LOG_LEVEL. You can find setup instructions on the server detail page.

What AI apps work with Huntress?

Huntress uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Huntress MCP Server

by Wyre Technology

Developer ToolsUse Caution4.8MCP RegistryLocal

Free

Server data from the Official MCP Registry

MCP server for Huntress — accounts, organizations, agents, incidents, and reports.

About

MCP server for Huntress — accounts, organizations, agents, incidents, and reports.

Security Report

4.8

Use Caution4.8High Risk

This is a well-structured MCP server for Huntress cybersecurity platform with appropriate authentication and reasonable permissions. The code implements proper HTTP Basic Auth, uses environment variables for credentials, and includes clear annotations for high-impact operations. Minor quality issues around input validation and error handling exist but do not substantially impact security posture. Permissions align with the server's purpose of providing structured access to Huntress API. Supply chain analysis found 6 known vulnerabilities in dependencies (2 critical, 3 high severity).

7 files analyzed · 12 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

process_spawn

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Huntress API key (public identifier portion of the API credential)Required

Environment variable: HUNTRESS_API_KEY

Huntress API secretRequired

Environment variable: HUNTRESS_API_SECRET

Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.Optional

Environment variable: MCP_TRANSPORT

Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.Optional

Environment variable: AUTH_MODE

Log verbosity: debug, info, warn, errorOptional

Environment variable: LOG_LEVEL

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-wyre-technology-huntress-mcp": {
      "env": {
        "AUTH_MODE": "your-auth-mode-here",
        "LOG_LEVEL": "your-log-level-here",
        "MCP_TRANSPORT": "your-mcp-transport-here",
        "HUNTRESS_API_KEY": "your-huntress-api-key-here",
        "HUNTRESS_API_SECRET": "your-huntress-api-secret-here"
      },
      "args": [
        "-y",
        "huntress-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Huntress MCP Server

A Model Context Protocol (MCP) server that provides AI assistants with structured access to Huntress cybersecurity platform data and operations.

Note: This project is maintained by Wyre Technology.

Quick Start

Claude Desktop — download, open, done:

Download huntress-mcp.mcpb from the latest release
Open the file (double-click or drag into Claude Desktop)
Enter your Huntress credentials when prompted (API Key, API Secret)

No terminal, no JSON editing, no Node.js install required.

Claude Code (CLI):

claude mcp add huntress-mcp \
  -e HUNTRESS_API_KEY=your-api-key \
  -e HUNTRESS_API_SECRET=your-api-secret \
  -- npx -y github:wyre-technology/huntress-mcp

See Installation for Docker and from-source methods.

Features

🔌 MCP Protocol Compliance: Full support for MCP resources and tools
🛡️ Comprehensive Security Coverage: Tools spanning agents, organizations, incidents, escalations, billing, signals, and users
🔍 Decision-Tree Navigation: Start with huntress_navigate to explore domains, then dynamically load domain-specific tools
📝 CRUD Operations: Create, read, update, delete operations for organizations, memberships, incidents, and more
🔒 Secure Authentication: HTTP Basic Auth with Huntress API credentials
🌐 Dual Transport: Supports both stdio (local) and HTTP Streamable (remote/Docker) transports
📦 MCPB Packaging: One-click installation via MCP Bundle for desktop clients
🐳 Docker Ready: Containerized deployment with HTTP transport and health checks
⚡ Rate Limiting: Built-in rate limiter respects Huntress API limits (60 req/min)
📊 Structured Logging: Comprehensive logging with configurable levels

Installation
Configuration
Usage
Domains
Docker Deployment
Development
Testing
Contributing
License

Installation

Option 1: MCPB Bundle (Claude Desktop)

The simplest method — no terminal, no JSON editing, no Node.js install required.

Download huntress-mcp.mcpb from the latest release
Open the file (double-click or drag into Claude Desktop)
Enter your Huntress credentials when prompted (API Key, API Secret)

For Claude Code (CLI), one command:

claude mcp add huntress-mcp \
  -e HUNTRESS_API_KEY=your-api-key \
  -e HUNTRESS_API_SECRET=your-api-secret \
  -- npx -y github:wyre-technology/huntress-mcp

Option 2: Docker

docker compose up

Or pull the pre-built image:

docker run -d \
  -e HUNTRESS_API_KEY=your-key \
  -e HUNTRESS_API_SECRET=your-secret \
  -p 8080:8080 \
  ghcr.io/wyre-technology/huntress-mcp:latest

Option 3: From Source

git clone https://github.com/wyre-technology/huntress-mcp.git
cd huntress-mcp
npm ci
npm run build

Configuration

Variable	Description	Default
`HUNTRESS_API_KEY`	API public key	—
`HUNTRESS_API_SECRET`	API secret key	—
`MCP_TRANSPORT`	Transport mode (`stdio` or `http`)	`stdio`
`MCP_HTTP_PORT`	HTTP server port	`8080`
`AUTH_MODE`	Auth mode (`env` or `gateway`)	`env`
`LOG_LEVEL`	Log level (`debug`, `info`, `warn`, `error`)	`info`

Domains

The server uses decision-tree navigation. Start with huntress_navigate to pick a domain:

Domain	Tools
accounts	Get account info, get current actor
agents	List agents, get agent by ID
organizations	List, get, create, update, delete organizations
incidents	Incident reports (list/get/resolve), remediations (list/get/approve/reject), escalations (list/get/resolve)
billing	Billing reports, summary reports
signals	List/get security signals
users	Membership CRUD (list/get/create/update/delete)

Docker Deployment

See docker-compose.yml for full configuration. Copy .env.example to .env and fill in your credentials:

cp .env.example .env
# Edit .env with your Huntress API credentials
docker compose up -d

Development

npm ci
npm run build       # Build the project
npm run dev         # Watch mode
npm run test        # Run tests
npm run lint        # Type-check
npm run clean       # Remove dist/

Testing

npm test            # Run test suite
npm run test:watch  # Watch mode

Contributing

See CONTRIBUTING.md for guidelines.

License

Apache 2.0 — Copyright WYRE Technology

Reviews

No reviews yet

Be the first to review this server!

More Developer Tools MCP Servers

Fetch

Free

by Modelcontextprotocol · Developer Tools

Web content fetching and conversion for efficient LLM usage

Toleno

Free

by Toleno · Developer Tools

Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.

mcp-creator-python

Free

by mcp-marketplace · Developer Tools

Create, build, and publish Python MCP servers to PyPI — conversationally.

Huntress MCP Server

About

Security Report

Findings (12)Action required

Permissions Required

What You'll Need

How to Install

Documentation

Huntress MCP Server

Quick Start

Features

Table of Contents

Installation

Option 1: MCPB Bundle (Claude Desktop)

Option 2: Docker

Option 3: From Source

Configuration

Domains

Docker Deployment

Development

Testing

Contributing

License

Reviews

No reviews yet

More Developer Tools MCP Servers

Fetch

Toleno

mcp-creator-python

MarkItDown

FinAgent

mcp-creator-typescript