{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-07-09/server.schema.json","name":"io.github.thomasxm/crowdsentinel-mcp-server","description":"AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics","repository":{"url":"https://github.com/thomasxm/CrowdSentinels-AI-MCP","source":"github"},"version":"0.6.0","packages":[{"registryType":"pypi","identifier":"crowdsentinel-mcp-server","version":"0.6.0","transport":{"type":"stdio"},"environmentVariables":[{"description":"Comma-separated Elasticsearch hosts. Supports HTTP/HTTPS, local/remote/cloud (e.g., http://localhost:9200, https://es.prod.example.com:9200)","format":"string","default":"https://localhost:9200","name":"ELASTICSEARCH_HOSTS"},{"description":"Elastic Cloud deployment ID (alternative to ELASTICSEARCH_HOSTS for cloud deployments)","format":"string","name":"ELASTICSEARCH_CLOUD_ID"},{"description":"API key for authentication (recommended for production and Elastic Cloud)","format":"string","isSecret":true,"name":"ELASTICSEARCH_API_KEY"},{"description":"Username for basic authentication (alternative to API key)","format":"string","name":"ELASTICSEARCH_USERNAME"},{"description":"Password for basic authentication (used with ELASTICSEARCH_USERNAME)","format":"string","isSecret":true,"name":"ELASTICSEARCH_PASSWORD"},{"description":"Bearer/service token for authentication (alternative to API key)","format":"string","isSecret":true,"name":"ELASTICSEARCH_BEARER_TOKEN"},{"description":"TLS certificate verification: true (verify CA — production), false (skip — dev/test), or /path/to/ca.crt (custom CA)","format":"string","default":"false","name":"VERIFY_CERTS"},{"description":"Request timeout in seconds (e.g., 60 or 10.5)","format":"string","name":"REQUEST_TIMEOUT"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-07-19T21:10:46.551907Z","publishedAt":"2026-07-19T21:10:46.551907Z","updatedAt":"2026-07-19T21:10:46.551907Z","isLatest":true}}}