github Python re-analysis due

google/mcp-security

github

maintainer: google
license: Apache-2.0
first seen: 2026-08-31
last seen: 2026-09-04
releases · 30d: 4
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 499 tools

transport stdio · http counts 499 tools · 0 res · 0 prompts permission surface via code analysis

tools

activate_parser
active_directory_add_user_to_group
active_directory_change_host_ou
active_directory_change_user_ou
active_directory_disable_account
active_directory_disable_computer
active_directory_enable_account
active_directory_enable_computer
active_directory_force_password_update
active_directory_get_manager_contact_details
active_directory_is_user_in_group
active_directory_list_user_groups
active_directory_ping
active_directory_release_locked_account
active_directory_remove_user_from_group
active_directory_search_active_directory
active_directory_set_user_password
active_directory_update_attributes_of_an_ad_host
active_directory_update_attributes_of_an_ad_user
add_case_tag
add_rows_to_data_table
alexa_get_url_rank
alexa_ping
algo_sec_ping
algo_sec_wait_for_change_request_status_update
alien_vault_anywhere_get_alarm_details
alien_vault_anywhere_ping
alien_vault_appliance_enrich_assets
alien_vault_appliance_enrich_vulnerabilities
alien_vault_appliance_fetch_last_pcap_files
alien_vault_appliance_get_pcap_files_for_events
alien_vault_appliance_get_vulnerability_reports
alien_vault_appliance_ping
alien_vault_ti_enriches_entities
alien_vault_ti_ping
amazon_macie_delete_custom_data_identifier
amazon_macie_disable_macie
amazon_macie_enable_macie
amazon_macie_get_findings
amazon_macie_ping
analyse_file
anomali_ping
anomali_staxx_ping
anomali_threat_stream_add_tags_to_entities
anomali_threat_stream_ping
anomali_threat_stream_remove_tags_from_entities
anomali_threat_stream_report_as_false_positive
any_run_ping
any_run_search_report_history
api_void_get_domain_reputation
api_void_get_ip_reputation
api_void_get_screenshot
api_void_get_url_reputation
api_void_ping
api_void_verify_email
app_sheet_add_record
app_sheet_delete_record
app_sheet_ping
app_sheet_search_records
app_sheet_update_record
arc_sight_logger_ping
arcsight_change_case_stage
arcsight_ping
arcsight_search
area1_get_recent_indicators
area1_ping
area1_search_indicator
armis_enrich_entities
armis_list_alert_connections
armis_ping
armis_update_alert_status
assign_case
atlassian_confluence_server_get_child_pages
atlassian_confluence_server_get_page_by_id
atlassian_confluence_server_get_page_comments
atlassian_confluence_server_ping
attivo_list_service_threat_paths
attivo_list_vulnerability_hosts
attivo_ping
attivo_update_event
authenticate
automox_enrich_entities
automox_execute_device_command
automox_execute_policy
automox_ping
aws_cloud_trail_ping
aws_cloud_watch_create_log_group
aws_cloud_watch_create_log_stream
aws_cloud_watch_delete_log_group
aws_cloud_watch_delete_log_stream
aws_cloud_watch_list_log_groups
aws_cloud_watch_ping
aws_cloud_watch_remove_retention_policy
aws_cloud_watch_set_retention_policy
aws_guard_duty_archive_findings
aws_guard_duty_create_a_detector
aws_guard_duty_create_sample_findings
aws_guard_duty_delete_a_detector
aws_guard_duty_delete_a_trusted_ip_list
aws_guard_duty_delete_threat_intelligence_set
aws_guard_duty_get_a_trusted_ip_list
aws_guard_duty_get_detector_details
aws_guard_duty_get_finding_details
aws_guard_duty_list_detectors
aws_guard_duty_ping
aws_guard_duty_unarchive_findings
aws_guard_duty_update_a_detector
aws_security_hub_get_insight_details
aws_security_hub_ping
awsec2_ping
awsec2_start_instance
awsec2_stop_instance
awsec2_take_snapshot
awsec2_terminate_instance
awsiam_access_analyzer_archive_finding
awsiam_access_analyzer_ping
awsiam_access_analyzer_scan_resources
awsiam_add_a_user_to_a_group
awsiam_create_a_group
awsiam_create_a_user
awsiam_disable_user_access
awsiam_list_groups
awsiam_list_policies
awsiam_list_users
awsiam_ping
awsiam_remove_a_user_from_a_group
awss3_download_file_from_bucket
awss3_get_bucket_policy
awss3_list_bucket_objects
awss3_list_buckets
awss3_ping
awss3_set_bucket_policy
awss3_upload_file_to_bucket
awswaf_add_ip_to_ip_set
awswaf_add_pattern_to_regex_pattern_set
awswaf_add_rule_to_rule_group
awswaf_list_ip_sets
awswaf_list_regex_pattern_sets
awswaf_list_rule_groups
awswaf_list_web_ac_ls
awswaf_ping
awswaf_remove_ip_from_ip_set
awswaf_remove_pattern_from_regex_pattern_set
awswaf_remove_rule_from_rule_group
awswaf_remove_rule_from_web_acl
axonius_add_note
axonius_add_tags
axonius_enrich_entities
axonius_ping
axonius_remove_tags
azure_active_directory_add_user_to_a_group
azure_active_directory_disable_account
azure_active_directory_enable_account
azure_active_directory_enrich_host
azure_active_directory_enrich_user
azure_active_directory_force_password_update
azure_active_directory_get_manager_contact_details
azure_active_directory_is_user_in_a_group
azure_active_directory_ping
azure_active_directory_reset_user_password
azure_active_directory_revoke_user_session
azure_ad_identity_protection_enrich_entities
azure_ad_identity_protection_ping
azure_ad_identity_protection_update_user_state
azure_security_center_get_o_auth_authorization_code
azure_security_center_get_o_auth_refresh_token
azure_security_center_ping
bit_sight_get_company_details
bit_sight_list_company_vulnerabilities
bit_sight_ping
blue_liv_add_comment_to_a_threat
blue_liv_enrich_entities
blue_liv_mark_threat_as_a_favorite
blue_liv_ping
bmc_helix_remedy_force_create_record
bmc_helix_remedy_force_delete_record
bmc_helix_remedy_force_execute_custom_query
bmc_helix_remedy_force_get_o_auth_authorization_code
bmc_helix_remedy_force_get_o_auth_refresh_token
bmc_helix_remedy_force_ping
bmc_remedy_itsm_add_work_note_to_incident
bmc_remedy_itsm_create_record
bmc_remedy_itsm_delete_incident
bmc_remedy_itsm_delete_record
bmc_remedy_itsm_get_record_details
bmc_remedy_itsm_ping
bmc_remedy_itsm_update_record
bulk_who_is_ping
bulk_who_is_who_is_details
ca_service_desk_add_comment
ca_service_desk_assign_incident_to_user
ca_service_desk_assign_to_group
ca_service_desk_change_ticket_status
ca_service_desk_close_ticket
ca_service_desk_ping
ca_service_desk_search_tickets
ca_service_desk_sync_ticket_history
ca_service_desk_wait_for_status_change
case_federation_ping
cb_defense_change_policy
cb_defense_create_policy
cb_defense_delete_policy
cb_defense_delete_rule_from_policy
cb_defense_get_device_info
cb_defense_get_events
cb_defense_get_processes
cb_defense_ping
cb_protection_analyze_file
cb_protection_block_hash
cb_protection_change_computer_policy
cb_protection_find_file
cb_protection_get_computers_by_file
cb_protection_get_system_info
cb_protection_ping
cb_protection_unblock_hash
cb_response_binary_free_query
cb_response_block_hash
cb_response_create_watchlist
cb_response_download_binary
cb_response_enrich_binary
cb_response_enrich_process
cb_response_get_file_mod_data_for_process
cb_response_get_license
cb_response_get_process_tree_data
cb_response_get_system_info
cb_response_hosts_by_process
cb_response_isolate_host
cb_response_kill_process
cb_response_list_processes
cb_response_ping
cb_response_process_free_query
cb_response_resolve_alert
cb_response_unblock_hash
cb_response_unisolate_host
certly_get_url_status
certly_ping
change_case_priority
change_case_stage
check_point_cloud_guard_ping
check_point_firewall_add_ip_to_group
check_point_firewall_add_url_to_group
check_point_firewall_list_layers_on_site
check_point_firewall_list_policies_on_site
check_point_firewall_ping
check_point_firewall_remove_ip_from_group
check_point_firewall_remove_url_from_group
check_point_firewall_run_script
check_point_sand_blast_ping
check_point_sand_blast_query
check_point_threat_reputation_get_file_hash_reputation
check_point_threat_reputation_get_host_reputation
check_point_threat_reputation_get_ip_reputation
check_point_threat_reputation_ping
cisco_amp_add_file_to_file_list
cisco_amp_create_group
cisco_amp_get_computer_info
cisco_amp_get_computers_by_file_hash
cisco_amp_get_computers_by_file_name
cisco_amp_get_computers_by_network_activity_ip
cisco_amp_get_computers_by_network_activity_url
cisco_amp_get_file_list_items
cisco_amp_get_file_lists_by_policy
cisco_amp_get_groups
cisco_amp_get_policies
cisco_amp_isolate_machine
cisco_amp_ping
cisco_amp_unisolate_machine
cisco_firepower_management_center_block_address
cisco_firepower_management_center_block_port
cisco_firepower_management_center_block_url
cisco_firepower_management_center_get_addresses_list_by_name
cisco_firepower_management_center_get_ports_list_by_name
cisco_firepower_management_center_get_url_list_by_name
cisco_firepower_management_center_ping
cisco_firepower_management_center_unblock_address
cisco_firepower_management_center_unblock_port
cisco_firepower_management_center_unblock_url
cisco_ise_add_endpoint_to_endpoint_identity_group
cisco_ise_enrich_endpoint
cisco_ise_get_endpoints
cisco_ise_get_sessions
cisco_ise_ping
cisco_ise_quarantine_address
cisco_ise_terminate_session
cisco_ise_unquarantine_address
cisco_orbital_ping
cisco_threat_grid_get_hash_associated_domains
cisco_threat_grid_get_hash_associated_i_ps
cisco_threat_grid_get_submissions
cisco_threat_grid_ping
cisco_umbrella_add_domain
cisco_umbrella_delete_domain
cisco_umbrella_get_associated_domains
cisco_umbrella_get_domain_security_info
cisco_umbrella_get_domain_status
cisco_umbrella_get_malicious_domains
cisco_umbrella_get_whois
cisco_umbrella_ping
close_case
cloud_logging_ping
cloudflare_add_ip_to_rule_list
cloudflare_create_rule_list
cloudflare_ping
cofense_triage_add_tags_to_report
cofense_triage_categorize_report
cofense_triage_enrich_url
cofense_triage_execute_playbook
cofense_triage_get_domain_details
cofense_triage_get_report_headers
cofense_triage_get_report_reporters
cofense_triage_get_threat_indicator_details
cofense_triage_list_reports_related_to_threat_indicators
cofense_triage_ping
compute_rule_exclusion_activity
connect_wise_add_comment_to_ticket
connect_wise_close_ticket
connect_wise_delete_ticket
connect_wise_get_ticket
connect_wise_ping
create_case
create_collection
create_data_table
create_feed
create_parser
create_reference_list
create_retrohunt
create_rule
create_rule_exclusion
create_watchlist
crowd_strike_falcon_add_alert_comment
crowd_strike_falcon_add_comment_to_detection
crowd_strike_falcon_add_identity_protection_detection_comment
crowd_strike_falcon_add_incident_comment
crowd_strike_falcon_close_detection
crowd_strike_falcon_contain_endpoint
crowd_strike_falcon_delete_ioc
crowd_strike_falcon_download_file
crowd_strike_falcon_get_event_offset
crowd_strike_falcon_get_host_information
crowd_strike_falcon_get_hosts_by_ioc
crowd_strike_falcon_get_process_name_by_ioc
crowd_strike_falcon_lift_contained_endpoint
crowd_strike_falcon_ping
crowd_strike_falcon_update_detection
csv_ping
csv_save_json_to_csv
cuckoo_detonate_file
cuckoo_detonate_url
cuckoo_get_report
cuckoo_ping
cyber_ark_pam_ping
cyber_ark_vault_disable_user
cyber_ark_vault_enable_user
cyber_ark_vault_get_group_details
cyber_ark_vault_get_user_details
cyber_ark_vault_ping
cyber_x_enrich_endpoints
cyber_x_get_alerts
cyber_x_get_connections_for_endpoint
cyber_x_get_device_vulnerability_report
cyber_x_get_events
cyber_x_ping
cybereason_add_comment_to_malop
cybereason_allow_file
cybereason_clear_reputation
cybereason_enrich_entities
cybereason_get_malop
cybereason_get_sensor_details
cybereason_is_probe_connected
cybereason_isolate_machine
cybereason_list_malop_affected_machines
cybereason_list_malop_processes
cybereason_list_malop_remediations
cybereason_ping
cybereason_prevent_file
cybereason_remediate_malop
cybereason_set_reputation
cybereason_unisolate_machine
cybereason_update_malop_status
cyberint_ping
cyberint_update_alert
cylance_add_to_global_list
cylance_enrich_entities
cylance_get_threat
cylance_get_threats
cylance_ping
deactivate_parser
delete_data_table_rows
delete_feed
delete_watchlist
disable_feed
do_update_security_alert
enable_feed
export_udm_search_csv
fetch_associated_investigations
find_udm_field_values
generate_feed_secret
get_alerts_for_host
get_available_log_types
get_case_full_details
get_collection_feature_matches
get_collection_mitre_tree
get_collection_report
get_collection_rules
get_collection_timeline_events
get_collections_commonalities
get_curated_rule
get_curated_rule_by_name
get_curated_rule_set
get_detection_rule
get_domain_report
get_entities_by_alert_group_identifiers
get_entities_related_to_a_collection
get_entities_related_to_a_domain
get_entities_related_to_a_file
get_entities_related_to_a_hunting_ruleset
get_entities_related_to_an_ip_address
get_entities_related_to_an_url
get_entity_details
get_feed
get_file_behavior_report
get_file_behavior_summary
get_file_report
get_finding_details
get_finding_remediation
get_host_information
get_hunting_ruleset
get_investigation
get_ioc_matches
get_ip_address_report
get_parser
get_recent_login
get_reference_list
get_retrohunt
get_rule_detections
get_rule_exclusion
get_security_alert_by_id
get_security_alerts
get_threat_intel
get_threat_profile
get_threat_profile_associations_timeline
get_threat_profile_recommendations
get_url_report
get_user_trust_assessment
get_watchlist
ingest_raw_log
ingest_udm_events
iron_port_ping
list_alert_group_identifiers_by_case
list_alerts_by_case
list_cases
list_curated_rule_set_deployments
list_curated_rule_sets
list_curated_rules
list_data_table_rows
list_events_by_alert
list_feeds
list_investigations
list_parsers
list_rule_errors
list_rule_exclusions
list_security_rules
list_threat_profiles
list_watchlists
lookup_entity
patch_rule_exclusion
post_case_comment
remove_case_tag
run_parser_against_sample_logs
search_campaigns
search_curated_detections
search_digital_threat_monitoring
search_entity
search_findings
search_findings_by_compliance
search_iocs
search_malware_families
search_rule_alerts
search_security_events
search_security_rules
search_software_toolkits
search_threat_actors
search_threat_reports
search_threats
search_udm
search_vulnerabilities
set_finding_mute
test_rule
top_vulnerability_findings
trigger_investigation
update_case_description
update_collection_attributes
update_curated_rule_set_deployment
update_feed
update_iocs_in_collection
update_reference_list
update_rule_exclusion_deployment
update_watchlist
validate_rule

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 0b6a42f · analyzer v33 · 17h ago

skills & prompt files 6

code evidence vsecops-soar-v0.1.2 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 387

filesystem 7

fs google-mcp-security-0b6a42f/run-with-google-adk/main.py :140 with open(index_html_path, "r") as f:
fs google-mcp-security-0b6a42f/run-with-google-adk/main_ae.py :77 with open(index_html_path, "r") as f:
fs google-mcp-security-0b6a42f/run-with-google-adk/utils_extensions_cbs_tools/tools.py :44 with open(f"{os.environ.get('LOCAL_DIR_FOR_FILES','/tmp')}/{file_name}.html", "w", encoding="utf-8") as f:
fs google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/files.py :263 with open(file_path, "rb") as f:
fs google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/server.py :18 from pathlib import Path
fs (weak) google-mcp-security-0b6a42f/server/secops-soar/tests/conftest.py :56 with open(config_path, "r") as f:
fs (weak) google-mcp-security-0b6a42f/server/secops/tests/conftest.py :9 import pathlib

shell / exec 1

shell (weak) google-mcp-security-0b6a42f/docs/conf.py :20 from subprocess import PIPE, Popen

network 2

net google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/files.py :16 import urllib.parse
net google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/http_client.py :19 import aiohttp

secrets 5

secrets google-mcp-security-0b6a42f/run-with-google-adk/main.py :127 # if os.environ.get("GOOGLE_API_KEY") == "NOT_SET":
secrets google-mcp-security-0b6a42f/run-with-google-adk/main_ae.py :67 # if os.environ.get("GOOGLE_API_KEY") == "NOT_SET":
secrets google-mcp-security-0b6a42f/run-with-google-adk/sample_servers_to_integrate/agents/demo_idp_agent.py :71 os.environ.get("IDP_CLIENT_SECRET")
secrets google-mcp-security-0b6a42f/run-with-google-adk/sample_servers_to_integrate/agents/demo_xdr_agent.py :72 os.environ.get("XDR_CLIENT_SECRET")
secrets google-mcp-security-0b6a42f/server/gti/gti_mcp/server.py :35 api_key = os.getenv("VT_APIKEY")

tool registrations 200

authenticate google-mcp-security-0b6a42f/run-with-google-adk/sample_servers_to_integrate/mcp_servers/demo_idp/idp_mcp_server.py :49
get_recent_login google-mcp-security-0b6a42f/run-with-google-adk/sample_servers_to_integrate/mcp_servers/demo_idp/idp_mcp_server.py :75
get_user_trust_assessment google-mcp-security-0b6a42f/run-with-google-adk/sample_servers_to_integrate/mcp_servers/demo_idp/idp_mcp_server.py :120
authenticate google-mcp-security-0b6a42f/run-with-google-adk/sample_servers_to_integrate/mcp_servers/demo_xdr/xdr_mcp_server.py :49
get_host_information google-mcp-security-0b6a42f/run-with-google-adk/sample_servers_to_integrate/mcp_servers/demo_xdr/xdr_mcp_server.py :75
get_alerts_for_host google-mcp-security-0b6a42f/run-with-google-adk/sample_servers_to_integrate/mcp_servers/demo_xdr/xdr_mcp_server.py :107
get_collection_report google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :57
get_entities_related_to_a_collection google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :86
search_threats google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :176
search_campaigns google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :239
search_threat_actors google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :262
search_malware_families google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :285
search_software_toolkits google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :308
search_threat_reports google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :331
search_vulnerabilities google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :356
get_collection_timeline_events google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :379
get_collection_mitre_tree google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :404
create_collection google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :423
update_collection_attributes google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :458
update_iocs_in_collection google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :486
get_collection_feature_matches google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :538
get_collections_commonalities google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :639
get_collection_rules google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/collections.py :709
get_file_report google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/files.py :88
get_entities_related_to_a_file google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/files.py :110
get_file_behavior_report google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/files.py :193
get_file_behavior_summary google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/files.py :228
analyse_file google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/files.py :251
search_digital_threat_monitoring google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/files.py :271
search_iocs google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/intelligence.py :27
get_hunting_ruleset google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/intelligence.py :72
get_entities_related_to_a_hunting_ruleset google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/intelligence.py :106
get_domain_report google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/netloc.py :91
get_entities_related_to_a_domain google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/netloc.py :111
get_ip_address_report google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/netloc.py :177
get_entities_related_to_an_ip_address google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/netloc.py :196
list_threat_profiles google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/threat_profiles.py :22
get_threat_profile google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/threat_profiles.py :54
get_threat_profile_recommendations google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/threat_profiles.py :102
get_threat_profile_associations_timeline google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/threat_profiles.py :147
get_url_report google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/urls.py :72
get_entities_related_to_an_url google-mcp-security-0b6a42f/server/gti/gti_mcp/tools/urls.py :93
search_findings google-mcp-security-0b6a42f/server/scc/scc_mcp.py :100
get_finding_details google-mcp-security-0b6a42f/server/scc/scc_mcp.py :225
search_findings_by_compliance google-mcp-security-0b6a42f/server/scc/scc_mcp.py :334
top_vulnerability_findings google-mcp-security-0b6a42f/server/scc/scc_mcp.py :520
get_finding_remediation google-mcp-security-0b6a42f/server/scc/scc_mcp.py :613
set_finding_mute google-mcp-security-0b6a42f/server/scc/scc_mcp.py :774
create_case google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :28
list_cases google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :110
post_case_comment google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :151
list_alerts_by_case google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :190
list_alert_group_identifiers_by_case google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :240
list_events_by_alert google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :288
change_case_priority google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :343
update_case_description google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :397
close_case google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :448
assign_case google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :530
change_case_stage google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :574
add_case_tag google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :620
remove_case_tag google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :665
get_entities_by_alert_group_identifiers google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :708
get_entity_details google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :752
search_entity google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :805
get_case_full_details google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/case_management.py :905
active_directory_force_password_update google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :105
active_directory_enable_computer google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :179
active_directory_get_manager_contact_details google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :253
active_directory_disable_account google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :327
active_directory_enable_account google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :401
active_directory_change_user_ou google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :475
active_directory_remove_user_from_group google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :550
active_directory_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :625
active_directory_list_user_groups google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :699
active_directory_update_attributes_of_an_ad_user google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :773
active_directory_update_attributes_of_an_ad_host google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :849
active_directory_release_locked_account google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :925
active_directory_change_host_ou google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :999
active_directory_add_user_to_group google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :1156
active_directory_set_user_password google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :1231
active_directory_disable_computer google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :1307
active_directory_is_user_in_group google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :1381
active_directory_search_active_directory google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/activedirectory.py :1456
alexa_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/alexa.py :27
alexa_get_url_rank google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/alexa.py :101
algo_sec_wait_for_change_request_status_update google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/algosec.py :107
algo_sec_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/algosec.py :183
alien_vault_ti_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/alienvaultti.py :27
alien_vault_ti_enriches_entities google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/alienvaultti.py :101
alien_vault_anywhere_get_alarm_details google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/alienvaultusmanywhere.py :27
alien_vault_anywhere_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/alienvaultusmanywhere.py :102
alien_vault_appliance_get_pcap_files_for_events google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/alienvaultusmappliance.py :27
alien_vault_appliance_enrich_assets google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/alienvaultusmappliance.py :101
alien_vault_appliance_fetch_last_pcap_files google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/alienvaultusmappliance.py :175
alien_vault_appliance_get_vulnerability_reports google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/alienvaultusmappliance.py :250
alien_vault_appliance_enrich_vulnerabilities google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/alienvaultusmappliance.py :325
alien_vault_appliance_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/alienvaultusmappliance.py :399
amazon_macie_get_findings google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/amazonmacie.py :27
amazon_macie_delete_custom_data_identifier google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/amazonmacie.py :190
amazon_macie_disable_macie google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/amazonmacie.py :265
amazon_macie_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/amazonmacie.py :339
amazon_macie_enable_macie google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/amazonmacie.py :413
anomali_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/anomali.py :108
anomali_staxx_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/anomalistaxx.py :27
anomali_threat_stream_add_tags_to_entities google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/anomalithreatstream.py :27
anomali_threat_stream_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/anomalithreatstream.py :102
anomali_threat_stream_report_as_false_positive google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/anomalithreatstream.py :281
anomali_threat_stream_remove_tags_from_entities google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/anomalithreatstream.py :567
any_run_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/any.run.py :209
any_run_search_report_history google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/any.run.py :385
api_void_get_url_reputation google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/apivoid.py :27
api_void_get_screenshot google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/apivoid.py :102
api_void_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/apivoid.py :176
api_void_verify_email google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/apivoid.py :250
api_void_get_domain_reputation google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/apivoid.py :325
api_void_get_ip_reputation google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/apivoid.py :401
app_sheet_update_record google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/appsheet.py :27
app_sheet_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/appsheet.py :103
app_sheet_search_records google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/appsheet.py :180
app_sheet_delete_record google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/appsheet.py :257
app_sheet_add_record google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/appsheet.py :413
arcsight_search google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/arcsight.py :27
arcsight_change_case_stage google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/arcsight.py :357
arcsight_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/arcsight.py :433
arc_sight_logger_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/arcsightlogger.py :116
area1_search_indicator google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/area1.py :27
area1_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/area1.py :101
area1_get_recent_indicators google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/area1.py :175
armis_ping google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/armis.py :27
armis_update_alert_status google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/armis.py :101
armis_enrich_entities google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/armis.py :178
armis_list_alert_connections google-mcp-security-0b6a42f/server/secops-soar/secops_soar_mcp/marketplace/armis.py :254
list_curated_rules google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/curated_rules_management.py :26
get_curated_rule google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/curated_rules_management.py :108
get_curated_rule_by_name google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/curated_rules_management.py :178
search_curated_detections google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/curated_rules_management.py :246
list_curated_rule_sets google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/curated_rules_management.py :360
get_curated_rule_set google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/curated_rules_management.py :448
list_curated_rule_set_deployments google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/curated_rules_management.py :519
update_curated_rule_set_deployment google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/curated_rules_management.py :611
create_data_table google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/data_table_management.py :25
add_rows_to_data_table google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/data_table_management.py :164
list_data_table_rows google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/data_table_management.py :273
delete_data_table_rows google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/data_table_management.py :376
lookup_entity google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/entity_lookup.py :26
list_feeds google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/feed_management.py :26
get_feed google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/feed_management.py :105
create_feed google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/feed_management.py :169
update_feed google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/feed_management.py :245
enable_feed google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/feed_management.py :320
disable_feed google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/feed_management.py :385
delete_feed google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/feed_management.py :450
generate_feed_secret google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/feed_management.py :511
list_investigations google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/investigation_management.py :25
get_investigation google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/investigation_management.py :95
trigger_investigation google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/investigation_management.py :175
fetch_associated_investigations google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/investigation_management.py :264
get_ioc_matches google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/ioc_matches.py :26
ingest_raw_log google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/log_ingestion.py :28
ingest_udm_events google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/log_ingestion.py :145
get_available_log_types google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/log_ingestion.py :294
create_parser google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/parser_management.py :28
get_parser google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/parser_management.py :147
list_parsers google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/parser_management.py :245
activate_parser google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/parser_management.py :348
deactivate_parser google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/parser_management.py :427
run_parser_against_sample_logs google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/parser_management.py :510
create_reference_list google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/reference_list_management.py :25
get_reference_list google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/reference_list_management.py :157
update_reference_list google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/reference_list_management.py :293
create_rule_exclusion google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/rule_exclusions.py :26
get_rule_exclusion google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/rule_exclusions.py :130
list_rule_exclusions google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/rule_exclusions.py :218
patch_rule_exclusion google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/rule_exclusions.py :317
update_rule_exclusion_deployment google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/rule_exclusions.py :419
compute_rule_exclusion_activity google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/rule_exclusions.py :537
search_udm google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/search.py :27
get_security_alerts google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/security_alerts.py :27
get_security_alert_by_id google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/security_alerts.py :156
do_update_security_alert google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/security_alerts.py :211
search_security_events google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/security_events.py :28
list_security_rules google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/security_rules.py :26
search_security_rules google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/security_rules.py :85
get_detection_rule google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/security_rules.py :139
get_rule_detections google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/security_rules.py :227
list_rule_errors google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/security_rules.py :360
create_rule google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/security_rules.py :430
test_rule google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/security_rules.py :543
validate_rule google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/security_rules.py :737
create_retrohunt google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/security_rules.py :887
get_retrohunt google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/security_rules.py :1047
search_rule_alerts google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/security_rules.py :1173
get_threat_intel google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/threat_intel.py :26
export_udm_search_csv google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/udm_search.py :28
find_udm_field_values google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/udm_search.py :202
create_watchlist google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/watchlist_management.py :25
update_watchlist google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/watchlist_management.py :125
delete_watchlist google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/watchlist_management.py :226
get_watchlist google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/watchlist_management.py :321
list_watchlists google-mcp-security-0b6a42f/server/secops/secops_mcp/tools/watchlist_management.py :402

declared dependencies 6

mcp@>=1.23.0,<2.0
vt-py@*
pytest@*
pytest_httpserver@*
pytest_asyncio@*
pytest-mock@*

transport_posture 1

network-listening, binds all interfaces, no auth detected google-mcp-security-0b6a42f/run-with-google-adk/cloudrun_deploy.py :51 uvicorn.run(app, host="0.0.0.0", port=int(os.environ.get("PORT", 8080)))