Security Detections MCP is a server based on the Model Context Protocol that allows LLMs to query a unified security detection rule database covering Sigma, Splunk ESCU, Elastic, and KQL formats. The latest version 3.0 is upgraded to an autonomous detection engineering platform that can automatically extract TTPs from threat intelligence, analyze coverage gaps, generate SIEM-native format detection rules, run tests, and verify. The project includes over 71 tools, 11 pre-built workflow prompts, and a knowledge graph system, supporting multiple SIEM platforms.

A FastMCP-based tool for interacting with Splunk Enterprise/Cloud through natural language, providing functions for searching, KV store management, and resource access.

A collection of MCP server implementations focused on security, providing enterprise-level security hardening, supporting integration with multiple security platforms including Splunk, CrowdStrike, and MISP, and equipped with comprehensive security protection measures.

A Spotify server - side project based on the MCP protocol that allows AI assistants to control Spotify accounts and perform operations such as music playback and playlist management.