$ loading_
Provide governed agent access to Cortex XSIAM security operations APIs.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "Cortex XSIAM MCP Gateway" yet — see the docs or source repo.
Use the Cortex XSIAM MCP Gateway to query logs from the last 24 hours related to suspicious PowerShell execution, sort by host, user, and time, and summarize unusual patterns.
Returns relevant XQL query results plus a summary of suspicious hosts, user activity, and anomaly trends.
Through the Cortex XSIAM MCP Gateway, list current high-priority security incidents and related cases, including status, owner, affected assets, and recommended next steps.
Outputs a list of high-priority incidents and cases with handling priority and follow-up recommendations.
Use the Cortex XSIAM MCP Gateway to check the security status of specified endpoints and assets, including recent alerts, exposure risks, associated users, and possible next investigation steps.
Returns a security overview of endpoints and assets to quickly identify risks and investigation priorities.
Expose Cortex XSIAM APIs as MCP tools for AI-driven security search and investigation.
Generate MCP tools from OpenAPI specs and call backend APIs conversationally.
Securely lets AI agents access authenticated services without exposing secrets.
Let AI agents investigate threats and manage Cisco Secure Access operations.
Connect AI agents to Splunk and TheHive for triage and security operations.
Securely search customer and ticket data, and create tickets with approval.