Copilot Mcp Soc Pack

data-ai MCP Server

Community SOC Pack for Microsoft Security Copilot. Free-API MCP server and OpenAPI plugin bundle (KEV, EPSS, MITRE ATTACK, Abuse.ch, GreyNoise, AbuseIPDB, crt.sh, ransomware.live, etc.) with one-click Deploy to Azure.

Verified
data-aidata-aiazure
1 views0 stars1 forksMIT

Why This Matters

Discovered via github-topic:model-context-protocol and last synced 3mo ago.

Verified
Source
github-topic:model-context-protocol
Stars
0
Last synced
3mo ago
Install
Check source

Install

Install instructions not detected yet

Check the source repository for the latest setup steps.

View source instructions
22
Tools
0
Resources
0
Prompts
Standard I/O
Transport

Available Tools (22)

Tool

Source

MCP_SOC_PACK_API_KEY

All routes

abuseipdb_check

[AbuseIPDB](https://www.abuseipdb.com/)

Variable

Used by

image

Container image

crtsh_subdomains

[crt.sh](https://crt.sh/)

location

Region

ABUSE_CH_AUTH_KEY

`/abusech/*`

Parameter

Description

ABUSEIPDB_API_KEY

`/abuseipdb/*`

containerAppName

Name for your Container App

No

Defensive-technique mappings against MITRE ATT&CK

apiKey

Shared secret that Security Copilot will send in the `X-API-Key` header (leave empty = no auth, do not use in production)

OTX_API_KEY

`/otx/*`

Scope

Also available as an official Security Copilot plugin?

GREYNOISE_API_KEY

`/greynoise/*`

APPLICATIONINSIGHTS_CONNECTION_STRING

All routes (tracing)

prompt

SC User -->

MCP_SOC_PACK_PUBLIC_BASE_URL

OpenAPI spec

MCP_SOC_PACK_CORS_ORIGINS

CORS middleware

epss_score

[FIRST EPSS API](https://www.first.org/epss/api)

OTEL_SERVICE_NAME

Tracing