QRadar MCP Server

by caohonghoa98 · security · mcp-server, glama

MCP server for IBM QRadar SIEM that consolidates 728 REST API endpoints into 4 intelligent tools, enabling natural language interaction for security tasks like managing offenses, assets, rules, and reference data.

Source: https://github.com/caohonghoa98/qradar-mcp-server-docker

Install

git clone https://github.com/caohonghoa98/qradar-mcp-server-docker

Tags: mcp-server, glama

Source: glama

About security MCP servers and Claude skills

Security MCP servers let agents scan dependencies, audit logs, check for vulnerabilities, and enforce policy guardrails. Critical for any agent that touches production.

QRadar MCP Server is one of hundreds of security entries indexed on Skiln. Browse the full security category or the complete directory of Claude skills, MCP servers, agents, commands, and hooks.

Related security MCPs and skills

  • QRadar MCP Server by caohonghoa98

    Bridges LLMs to IBM QRadar SIEM via 4 intelligent MCP tools covering 728 REST API endpoints, enabling natural language queries for offenses, assets, rules, and more.

  • Panorama MCP Server by fquiroga

    A read-only MCP server for Palo Alto Panorama policy review that reads security rules, finds duplicates, broader coverage, conflicts, and overlaps, and returns preclear decisions without committing changes.

  • docker-copilot-mcp by trijal-s

    Enables Claude to inspect and manage Docker containers locally, including listing containers, fetching status and logs, and checking system health. It also supports safely restarting whitelisted containers through a two-step confirmation flow with an audit trail.

  • mcp-reliable-adapter by thezeivier

    An MCP server that reliably accepts support tickets even during downstream SaaS outages, using transactional outbox, idempotency, retries, dead-letter handling, and an audit trail.

  • Enterprise MCP Server by Ilavarasan-v

    A modular, security-focused MCP server that exposes enterprise-ready tools for filesystem, database, REST API, system utilities, and AI generation, with authentication, authorization, and audit logging.

  • pmi-mcp-server by diegoluppi1993

    MCP server that exposes a single tool to execute SQL queries directly against Microsoft SQL Server via pyodbc, returning result sets as JSON. It forwards queries without parsing or filtering, relying on database permissions for security.

  • Exchange Mail MCP Server by timeagent4-lang

    Secure MCP server for Microsoft Exchange. It enables authorized users to list, search, read, download attachments, send, and reply to email via EWS with strict access control and audit.

  • tor-mcp by ilkerK01

    MCP server for .onion/dark web research that exposes the OpenTor skill engine over Model Context Protocol, enabling authorized threat intelligence, red teaming, and security research from any MCP-compatible client.

Frequently asked questions

How do I install QRadar MCP Server?

Add the install command above to your Claude Code, Cursor, or Windsurf MCP configuration. Most servers register via npx, a local command, or a Docker image. Refer to the source repository for environment variables and credential requirements.

Which clients support QRadar MCP Server?

Any MCP-compatible client works: Claude Desktop, Claude Code CLI, Cursor, Windsurf, Zed, and VS Code with the official MCP extension. OpenAI Codex and GitHub Copilot increasingly support MCP via adapter bridges.

Is QRadar MCP Server free?

The server itself is typically open source. Any upstream service (API keys, paid tiers, hosted infrastructure) may have its own pricing. Check the source repository for details.