MCP Server Malcolm runs on your own machine — the client starts it, so there is no endpoint to ping. 4 109 installs a week from pypi. Last commit 3 Aug 2026.
MCP server for Malcolm (Zeek/Suricata/Arkime/OpenSearch): threat-hunting access for AI agents
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp-server-malcolm -- uvx mcp-server-malcolm
{
"mcpServers": {
"mcp-server-malcolm": {
"args": [
"mcp-server-malcolm"
],
"command": "uvx"
}
}
}
[mcp_servers.mcp-server-malcolm]
command = "uvx"
args = ["mcp-server-malcolm"]
{
"mcpServers": {
"mcp-server-malcolm": {
"args": [
"mcp-server-malcolm"
],
"command": "uvx"
}
}
}
{
"mcpServers": {
"mcp-server-malcolm": {
"args": [
"mcp-server-malcolm"
],
"command": "uvx"
}
}
}
Answers built from our own checks of this server.