MCP server for Zeek + Suricata network security monitoring logs. Query, hunt, and correlate NSM telemetry from an AI client.
Quick Install
Copy the config for your editor. Some servers may need additional setup — check the README.
Add to claude_desktop_config.json:
{
"mcpServers": {
"zeek-mcp": {
"command": "npx",
"args": [
"-y",
"lidless-labs/zeek-mcp"
]
}
}
}
Run in terminal:
claude mcp add zeek-mcp npx -y lidless-labs/zeek-mcp
Add to .cursor/mcp.json:
{
"mcpServers": {
"zeek-mcp": {
"command": "npx",
"args": [
"-y",
"lidless-labs/zeek-mcp"
]
}
}
}