mcp-security
Security alert triage, threat hunting, and incident investigation
All Skills in This Repository (5)
Pure Emerald Level Indicatorssecops-hunt
Guide analysts through SIEM searches, IOC gathering, and phased investigations.
secops-investigate
Guide security incident investigations with procedures for enrichment, synthesis, and reporting.
secops-setup-gemini
Configures Gemini CLI's ~/.gemini/config.json to route Cloud Auth requests to Chronicle via remote-mcp-secops server with specified project ID and headers.
secops-setup-antigravity
Configure Google SecOps Remote MCP Server for Antigravity deployments.
secops-triage
Triage security alerts and cases using the Alert Triage Protocol.
Frequently Asked Questions
FAQPage SchemaHow to install mcp-security?โผ
Run `npx skills add google/mcp-security --all -g -y` in your terminal to install all skills in this suite globally.
How to automate security alert triage?โผ
The triage skill walks your agent through a standard protocol: gathering case context, checking duplicates, enriching indicators, and classifying alerts as false positives or true threats.
Can I hunt threats in Chronicle SIEM with plain English?โผ
Yes. The hunt skill translates your natural language requests into UDM queries, searches for IOCs and MITRE ATT&CK techniques, and documents findings in SOAR cases.
Does mcp-security work with Gemini CLI and Claude?โผ
Yes. The servers follow the MCP standard and include setup skills for Gemini CLI and Antigravity, plus configurations for Claude Desktop, Claude Code, Cursor, and Cline.
What Google security products does it connect to?โผ
It connects to Google Security Operations (Chronicle SIEM), SecOps SOAR, Google Threat Intelligence, and Security Command Center, each as a separate server you can enable independently.
Related Repositories in Legal & Compliance
View All in Legal & Complianceโclaude-for-legal
AI legal workspace for contracts, privacy, IP, litigation, and compliance
patent-disclosure-skill
Draft Chinese patent disclosures and read patents in plain language
app-privacy-policy-generator
Generate privacy policies and terms for mobile and web apps