crowdsentinel-mcp-server

crowdsentinel-mcp-server is a local MCP server: AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics. Install it from pypi as crowdsentinel-mcp-server.

Claude CodeCodexAntigravity

commandprompt

Terminal

claude mcp add crowdsentinel-mcp-server -e ELASTICSEARCH_HOSTS=... -e ELASTICSEARCH_CLOUD_ID=... -e ELASTICSEARCH_API_KEY=... -e ELASTICSEARCH_USERNAME=... -e ELASTICSEARCH_PASSWORD=... -e ELASTICSEARCH_BEARER_TOKEN=... -e VERIFY_CERTS=... -e REQUEST_TIMEOUT=... -- uvx crowdsentinel-mcp-server

Run in your project folder. Add --scope user to use it everywhere.

Add to claude_desktop_config.json or .cursor/mcp.json.

{
  "mcpServers": {
    "crowdsentinel-mcp-server": {
      "command": "uvx",
      "args": [
        "crowdsentinel-mcp-server"
      ],
      "env": {
        "ELASTICSEARCH_HOSTS": "...",
        "ELASTICSEARCH_CLOUD_ID": "...",
        "ELASTICSEARCH_API_KEY": "...",
        "ELASTICSEARCH_USERNAME": "...",
        "ELASTICSEARCH_PASSWORD": "...",
        "ELASTICSEARCH_BEARER_TOKEN": "...",
        "VERIFY_CERTS": "...",
        "REQUEST_TIMEOUT": "..."
      }
    }
  }
}

Fill in the environment variables with your own credentials.

• Runtime: Python with uv (runs with uvx).
• MCP client: Claude Code, Codex, Antigravity, Claude Desktop, Cursor or any other client that speaks MCP over stdio.
• Environment variables: ELASTICSEARCH_HOSTS, ELASTICSEARCH_CLOUD_ID, ELASTICSEARCH_API_KEY, ELASTICSEARCH_USERNAME, ELASTICSEARCH_PASSWORD, ELASTICSEARCH_BEARER_TOKEN, VERIFY_CERTS, REQUEST_TIMEOUT