Security Detections MCP is a server based on the Model Context Protocol that allows LLMs to query a unified security detection rule database covering Sigma, Splunk ESCU, Elastic, and KQL formats. The latest version 3.0 is upgraded to an autonomous detection engineering platform that can automatically extract TTPs from threat intelligence, analyze coverage gaps, generate SIEM-native format detection rules, run tests, and verify. The project includes over 71 tools, 11 pre-built workflow prompts, and a knowledge graph system, supporting multiple SIEM platforms.

The Allstacks MCP Server is a Model Context Protocol service that provides comprehensive access to the Allstacks API. It supports over 208 tools through HTTP basic authentication, covering 12 categories such as metric analysis, work item management, user teams, organizational projects, dashboards, employee analysis, predictive planning, tag management, alert monitoring, AI intelligence, work packages, and risk management.