Security MCP Server 🐳 Docker

Huntress MCP

MCP server for the Huntress cybersecurity platform. Manage agents, organizations, incidents, escalations, signals, and users.

Installation

Run the MCP server with npx:

npx huntress-mcp

Or install the package:

npm install huntress-mcp

Claude Desktop Configuration

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "huntress": {
      "command": "npx",
      "args": [
        "huntress-mcp"
      ],
      "env": {
        "HUNTRESS_API_KEY": "your-huntress-api-key",
        "HUNTRESS_API_SECRET": "your-huntress-api-secret"
      }
    }
  }
}

Authentication

Variable	Required	Description
`HUNTRESS_API_KEY`	Yes	Your Huntress API public key
`HUNTRESS_API_SECRET`	Yes	Your Huntress API secret key

Architecture

Single TypeScript MCP server supporting both stdio and Streamable HTTP transports.

Available Tools (20)

Tools are organized into 5 domains:

Agents

View and manage Huntress agents across organizations.

Tool	Description
`List agents`	List agents with filtering
`Get agent`	Get details for a specific agent

Organizations

Manage customer organizations.

Tool	Description
`List organizations`	List all organizations
`Get organization`	Get organization details
`Create organization`	Create a new organization
`Update organization`	Update an organization
`Delete organization`	Delete an organization

Incidents & Escalations

Triage, resolve, and bulk-manage security incidents.

Tool	Description
`List incidents`	List incidents with filtering
`Get incident`	Get incident details and remediations
`Resolve incident`	Mark an incident as resolved
`Bulk approve remediations`	Approve remediations in bulk
`List escalations`	List escalated incidents
`Resolve escalation`	Resolve an escalation

Signals

View and investigate threat signals.

Tool	Description
`List signals`	List threat signals
`Get signal`	Get signal details

Users

Manage Huntress platform users.

Tool	Description
`List users`	List platform users
`Get user`	Get user details
`Create user`	Create a new user
`Update user`	Update a user
`Delete user`	Delete a user