io.github.thomasxm/crowdsentinel-mcp-server
AI-powered threat hunting and incident response MCP server for Elasticsearch/OpenSearch
Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.
Own this server? Screen its description →
ELASTICSEARCH_HOSTSComma-separated Elasticsearch hosts. Supports HTTP/HTTPS, local/remote/cloud (e.g., http://localhost:9200, https://es.prod.example.com:9200)
ELASTICSEARCH_CLOUD_IDElastic Cloud deployment ID (alternative to ELASTICSEARCH_HOSTS for cloud deployments)
ELASTICSEARCH_API_KEYAPI key for authentication (recommended for production and Elastic Cloud)
ELASTICSEARCH_USERNAMEUsername for basic authentication (alternative to API key)
ELASTICSEARCH_PASSWORDPassword for basic authentication (used with ELASTICSEARCH_USERNAME)
ELASTICSEARCH_BEARER_TOKENBearer/service token for authentication (alternative to API key)
VERIFY_CERTSTLS certificate verification: true (verify CA — production), false (skip — dev/test), or /path/to/ca.crt (custom CA)
REQUEST_TIMEOUTRequest timeout in seconds (e.g., 60 or 10.5)
AI-powered news intelligence — 21 tools for personalized monitoring, briefings, and semantic search
Read-only access to Auralogs production logs: search logs, inspect errors, review AI analyses.
Quant-research MCP — tradeable signals from public-company website stack changes. 7 tools.