tenzir-mcp 0.4.1

MCP server for Tenzir

⚙️ Tenzir MCP Server

A Model Context Protocol (MCP) server that enables AI assistants to interact with Tenzir—a data pipeline engine for security operations.

This MCP server provides tools for executing pipelines written in the Tenzir Query Language (TQL)), working with Open Cybersecurity Schema Framework (OCSF), managing packages, generating parsers, and exploring documentation.

✨ Features

• Pipeline Execution: Run TQL pipelines and tests
• Documentation Access: Search and browse embedded Tenzir documentation with cross-reference support
• OCSF Integration: Query and work with OCSF definitions, event classes, objects, and profiles.
• Package Management: Create and manage Tenzir packages with operators, pipelines, enrichment contexts, and tests
• Code Generation: Auto-generate TQL parsers and OCSF mapping packages

📦 Installation

Use Docker as the fastest way to get started:

docker run -i tenzir/mcp

Or use uvx when you have a local Tenzir installation:

uvx tenzir-mcp

📚 Documentation

• Setup instructions, including MCP client configurations
• Reference, including usage and tool overview

🧑‍💻 Development

See DEVELOPMENT.md for development setup, testing, and contributing guidelines.

📜 License

This project is licensed under the Apache License 2.0.