MCP serverOfficial
Google Security Operations MCP server
RemoteCan change dataNeeds an API key
Google's hosted MCP server for Google Security Operations (Chronicle), reached at a regional Google endpoint.
What it does
Google's hosted MCP server for Google Security Operations (Chronicle), reached at a regional Google endpoint. An analyst's assistant can work through cases and their alerts, comments and involved entities, change case and alert properties or close cases, run integration actions and look at playbooks. On the SIEM side it can run UDM searches, turn plain-language questions into UDM queries, summarise entities and check indicator matches. It also helps with detection work, data tables, log ingestion, feeds and parsers, so many tools write data.
Capabilities
- Read, update and close cases and alerts
- Run UDM searches and translate questions into UDM queries
- Summarise entities and check IoC matches
- Run integration actions and list playbooks
- Draft detection rules and test rule coverage
- Manage data tables, feeds and parsers
Details
| Fact | Value | Source |
|---|---|---|
| Type | MCP server | |
| Tool | Google Cloud | |
| Publisher | source | |
| Official status | Officiallisted on Google's own supported-products page for Google and Google Cloud MCP servers | source |
| Connection | Remote (hosted, you connect over the internet) | source |
| Can change data | Yes | source |
| Needs an API key or sign-in | Yes | source |
| Platforms | Not stated in its documentation | |
| AI clients | Not stated in its documentation | |
| Licence | Not stated in its documentation | |
| Pricing | Not stated in its documentation | |
| Activity | No commit dataDownload data not available (not on npm or PyPI) | |
| Links | Website |