mcp

tenzir/mcp

3.3

If you are the rightful owner of mcp and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to dayong@mcphub.com.

The Tenzir MCP Server is a FastMCP server that integrates with Tenzir data pipelines using the Model Context Protocol.

⚙️ Tenzir MCP Server

PyPI License

A Model Context Protocol (MCP) server that enables AI assistants to interact with Tenzir—a data pipeline engine for security operations.

This MCP server provides tools for executing pipelines written in the Tenzir Query Language (TQL)), working with Open Cybersecurity Schema Framework (OCSF), managing packages, generating parsers, and exploring documentation.

✨ Features

  • Pipeline Execution: Run TQL pipelines and tests
  • Documentation Access: Search and browse embedded Tenzir documentation with cross-reference support
  • OCSF Integration: Query and work with OCSF definitions, event classes, objects, and profiles.
  • Package Management: Create and manage Tenzir packages with operators, pipelines, enrichment contexts, and tests
  • Code Generation: Auto-generate TQL parsers and OCSF mapping packages

📦 Installation

Use Docker as the fastest way to get started:

docker run -i tenzir/mcp

Or use uvx when you have a local Tenzir installation:

uvx tenzir-mcp

📚 Documentation

Consult our setup guide for installation and MCP client configuration.

We also provide a reference that explains usage and available tools.

🤝 Contributing

Want to contribute? We're all-in on agentic coding with Claude Code! The repo comes pre-configured with our custom plugins—just clone and start hacking.

📜 License

This project is licensed under the .