MCP Observatory
2m ago Tracked 26,551 Last 2m ago 24h 1,897
github Python analyzed · update queued 122d5bc

nagameTW/mcp-server-malcolm

github

MCP server for Malcolm (Zeek/Suricata/Arkime/OpenSearch/NetBox): full read surface plus opt-in, audited write tools

maintainer
nagameTW
license
MIT
first seen
2026-07-24
last seen
2026-08-01
releases · 30d
17
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 33

filesystem 2

  • fs nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/audit.py :55 with open(audit_file, "a", encoding="utf-8") as fh:
  • fs nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/write/pcap_upload.py :54 with open(path, "rb") as fh:

network 4

  • net nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/client.py :22 import httpx
  • net nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/write/alerting.py :13 import httpx
  • net nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/write/arkime_tags.py :13 import httpx
  • net nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/write/hunt_jobs.py :14 import httpx

secrets 1

  • secrets nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/client.py :77 password=os.environ.get("MALCOLM_PASSWORD", "admin"),

tool registrations 30

  • arkime_sessions nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/arkime.py :22
  • arkime_session_pcap nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/arkime.py :72
  • arkime_session_detail nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/arkime.py :134
  • arkime_unique nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/arkime.py :159
  • arkime_spigraph nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/arkime.py :191
  • arkime_spiview nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/arkime.py :228
  • arkime_connections nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/arkime.py :264
  • malcolm_related_sessions nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/correlation.py :17
  • search_dsl nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/dsl.py :34
  • count nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/dsl.py :58
  • list_indices nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/dsl.py :70
  • index_mapping nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/dsl.py :78
  • cluster_health nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/dsl.py :86
  • malcolm_field_search nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/fields.py :17
  • malcolm_field_values nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/fields.py :53
  • malcolm_field_profile nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/fields.py :103
  • malcolm_service_status nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/health.py :17
  • malcolm_data_coverage nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/health.py :62
  • malcolm_ping nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/health.py :113
  • malcolm_dashboard_export nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/health.py :122
  • malcolm_netbox_lookup nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/netbox.py :17
  • malcolm_netbox_sites nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/netbox.py :76
  • malcolm_search nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/query.py :17
  • malcolm_aggregate nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/query.py :51
  • malcolm_alerts nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/query.py :84
  • malcolm_create_alert nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/write/alerting.py :28
  • arkime_add_tags nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/write/arkime_tags.py :28
  • arkime_create_hunt nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/write/hunt_jobs.py :30
  • arkime_hunt_status nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/write/hunt_jobs.py :120
  • malcolm_upload_pcap nagameTW-mcp-server-malcolm-122d5bc/src/mcp_server_malcolm/tools/write/pcap_upload.py :28

declared dependencies 2

  • mcp@>=1.0
  • httpx@>=0.27