$ loading_
Connect AI agents to Splunk and TheHive for triage and security operations.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "MCP-SOC Middleware" yet — see the docs or source repo.
Using MCP-SOC Middleware, query high-severity alerts in Splunk from the last 24 hours, summarize them by source, severity, and matching rule, and identify the top 5 that need immediate attention.
A summarized list of high-severity alerts with prioritization and brief response recommendations.
Please review all open cases in TheHive, list the assignee, current status, and last update time, and generate follow-up recommendations for cases untouched for more than 48 hours.
A case status report highlighting overdue cases and suggested next actions.
Based on Splunk alerts and TheHive case data, generate today’s security operations report including new alert count, escalated incidents, closed cases, and a risk summary for management attention.
A structured daily security operations report suitable for team syncs or management updates.
Enable AI agents to manage TheHive cases, alerts, observables, and tasks.
Analyze security incidents, map ATT&CK tactics, score severity, and suggest remediation.
Monitor AI agents with policy enforcement, audit logs, and risk blocking via Splunk MCP.
Investigate security events in Splunk with natural-language querying and response automation.
Safely lets AI agents use threat analysis and security operations tools.
Query and automate 7,283+ security detection rules in one place.