# 安装 io.github.thomasxm/crowdsentinel-mcp-server

- 类型: MCP 工具
- 说明: AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics
- 仓库: https://github.com/thomasxm/CrowdSentinels-AI-MCP

## 方式一 · 一键代装（复制提示词让 AI 代劳）

### Claude Code
```
请帮我安装 askskill 上的 "io.github.thomasxm/crowdsentinel-mcp-server" MCP 服务：
执行：claude mcp add 'io-github-thomasxm-crowdsentinel-mcp-server' -- npx -y crowdsentinel-mcp-server
```

### Codex
```
请帮我安装 askskill 上的 "io.github.thomasxm/crowdsentinel-mcp-server" MCP 服务：
在 ~/.codex/config.toml 中添加：
[mcp_servers.io-github-thomasxm-crowdsentinel-mcp-server]
command = "npx"
args = ["-y","crowdsentinel-mcp-server"]
然后重启 Codex 生效
```

### Cursor
```
请帮我安装 askskill 上的 "io.github.thomasxm/crowdsentinel-mcp-server" MCP 服务：
在 .cursor/mcp.json 的 "mcpServers" 中添加：
"io-github-thomasxm-crowdsentinel-mcp-server": { "command": "npx", "args": ["-y","crowdsentinel-mcp-server"] }
然后在 Cursor 设置 > MCP 中启用
```

## 方式二 · 命令行安装（原生命令与配置）

### Claude Code
```bash
claude mcp add --env ELASTICSEARCH_HOSTS=YOUR_VALUE --env ELASTICSEARCH_CLOUD_ID=YOUR_VALUE --env ELASTICSEARCH_API_KEY=YOUR_VALUE --env ELASTICSEARCH_USERNAME=YOUR_VALUE --env ELASTICSEARCH_PASSWORD=YOUR_VALUE --env ELASTICSEARCH_BEARER_TOKEN=YOUR_VALUE --env VERIFY_CERTS=YOUR_VALUE --env REQUEST_TIMEOUT=YOUR_VALUE --transport stdio io-github-thomasxm-crowdsentinel-mcp-server -- npx -y crowdsentinel-mcp-server
```
需要环境变量：ELASTICSEARCH_HOSTS, ELASTICSEARCH_CLOUD_ID, ELASTICSEARCH_API_KEY, ELASTICSEARCH_USERNAME, ELASTICSEARCH_PASSWORD, ELASTICSEARCH_BEARER_TOKEN, VERIFY_CERTS, REQUEST_TIMEOUT

### Codex
```bash
codex mcp add --env ELASTICSEARCH_HOSTS=YOUR_VALUE --env ELASTICSEARCH_CLOUD_ID=YOUR_VALUE --env ELASTICSEARCH_API_KEY=YOUR_VALUE --env ELASTICSEARCH_USERNAME=YOUR_VALUE --env ELASTICSEARCH_PASSWORD=YOUR_VALUE --env ELASTICSEARCH_BEARER_TOKEN=YOUR_VALUE --env VERIFY_CERTS=YOUR_VALUE --env REQUEST_TIMEOUT=YOUR_VALUE io-github-thomasxm-crowdsentinel-mcp-server -- npx -y crowdsentinel-mcp-server
```
配置文件 ~/.codex/config.toml：
```toml
[mcp_servers.io-github-thomasxm-crowdsentinel-mcp-server]
command = "npx"
args = ["-y","crowdsentinel-mcp-server"]

[mcp_servers.io-github-thomasxm-crowdsentinel-mcp-server.env]
ELASTICSEARCH_HOSTS = "YOUR_VALUE"
ELASTICSEARCH_CLOUD_ID = "YOUR_VALUE"
ELASTICSEARCH_API_KEY = "YOUR_VALUE"
ELASTICSEARCH_USERNAME = "YOUR_VALUE"
ELASTICSEARCH_PASSWORD = "YOUR_VALUE"
ELASTICSEARCH_BEARER_TOKEN = "YOUR_VALUE"
VERIFY_CERTS = "YOUR_VALUE"
REQUEST_TIMEOUT = "YOUR_VALUE"
```
需要环境变量：ELASTICSEARCH_HOSTS, ELASTICSEARCH_CLOUD_ID, ELASTICSEARCH_API_KEY, ELASTICSEARCH_USERNAME, ELASTICSEARCH_PASSWORD, ELASTICSEARCH_BEARER_TOKEN, VERIFY_CERTS, REQUEST_TIMEOUT

### Cursor
配置文件 .cursor/mcp.json：
```json
{
  "mcpServers": {
    "io-github-thomasxm-crowdsentinel-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "crowdsentinel-mcp-server"
      ],
      "env": {
        "ELASTICSEARCH_HOSTS": "YOUR_VALUE",
        "ELASTICSEARCH_CLOUD_ID": "YOUR_VALUE",
        "ELASTICSEARCH_API_KEY": "YOUR_VALUE",
        "ELASTICSEARCH_USERNAME": "YOUR_VALUE",
        "ELASTICSEARCH_PASSWORD": "YOUR_VALUE",
        "ELASTICSEARCH_BEARER_TOKEN": "YOUR_VALUE",
        "VERIFY_CERTS": "YOUR_VALUE",
        "REQUEST_TIMEOUT": "YOUR_VALUE"
      }
    }
  }
}
```
一键安装：cursor://anysphere.cursor-deeplink/mcp/install?name=io-github-thomasxm-crowdsentinel-mcp-server&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsImNyb3dkc2VudGluZWwtbWNwLXNlcnZlciJdLCJlbnYiOnsiRUxBU1RJQ1NFQVJDSF9IT1NUUyI6IllPVVJfVkFMVUUiLCJFTEFTVElDU0VBUkNIX0NMT1VEX0lEIjoiWU9VUl9WQUxVRSIsIkVMQVNUSUNTRUFSQ0hfQVBJX0tFWSI6IllPVVJfVkFMVUUiLCJFTEFTVElDU0VBUkNIX1VTRVJOQU1FIjoiWU9VUl9WQUxVRSIsIkVMQVNUSUNTRUFSQ0hfUEFTU1dPUkQiOiJZT1VSX1ZBTFVFIiwiRUxBU1RJQ1NFQVJDSF9CRUFSRVJfVE9LRU4iOiJZT1VSX1ZBTFVFIiwiVkVSSUZZX0NFUlRTIjoiWU9VUl9WQUxVRSIsIlJFUVVFU1RfVElNRU9VVCI6IllPVVJfVkFMVUUifX0
需要环境变量：ELASTICSEARCH_HOSTS, ELASTICSEARCH_CLOUD_ID, ELASTICSEARCH_API_KEY, ELASTICSEARCH_USERNAME, ELASTICSEARCH_PASSWORD, ELASTICSEARCH_BEARER_TOKEN, VERIFY_CERTS, REQUEST_TIMEOUT
