Security-Detections-MCP MCP Server
MHaggis/Security-Detections-MCP
[](https://agentrank-ai.com/tool/MHaggis--Security-Detections-MCP/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) Are you the maintainer of MHaggis/Security-Detections-MCP? Claim this listing →
MCP to help Defenders Detection Engineer Harder and Smarter
Add AgentRank to Claude Code Discover and compare tools like MHaggis/Security-Detections-MCP — your AI finds the right one automatically
Get API Access → claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
MHaggis/Security-Detections-MCP is a TypeScript tool. MCP to help Defenders Detection Engineer Harder and Smarter Topics: detection-engineering, mcp.
Ranked #4951 out of 24846 indexed tools.
Ecosystem
TypeScript No license
detection-engineeringmcp
Score Breakdown
Stars 15% 498
498 stars → growing community
Freshness 25% 4mo ago
Last commit 4mo ago → stale
Issue Health 25% 100%
1/1 issues closed → responsive maintainer
Contributors 10% 4
4 contributors → small team
Dependents 25% 0
No dependents → no downstream usage
npm Downloads N/A
PyPI Downloads N/A
Forks 77
Description Good
License None
Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →
How to Improve
Description low impact
License low impact
Freshness high impact
Matched Queries
From the README
# Security Detections MCP An MCP (Model Context Protocol) server that lets LLMs query a unified database of **Sigma**, **Splunk ESCU**, **Elastic**, **KQL**, **Sublime**, and **CrowdStrike CQL** security detection rules. > **New here? Start with the [Setup Guide](./SETUP.md)** -- covers macOS, Windows (WSL & native), and Linux step by step. > > **Want it hosted? Skip the install entirely: [Hosted MCP Setup Guide](./docs/HOSTED_MCP.md)** ## Two Ways to Run It **Local (full power)** — the npm package you're looking at. Runs on your machine, indexes your own detection repos, exposes all 81 tools. You need Node.js and ~10 minutes. **Hosted (zero setup)** — a Streamable HTTP server at [`detect.michaelhaag.org/api/mcp/mcp`](https://detect.michaelhaag.org/mcp). Sign up, generate a token, paste one URL into your MCP client. ~25 read-only tools, always in sync with the latest content, 200 calls/day free. Read on for quick-install buttons. ### Install — Local **Claude Code** (CLI one-lineRead full README on GitHub →
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.