Skip to content

nuoframework/darktrace-mcp

v1.1.2Apache-2.0

Investigate alerts, devices and incidents on your own Darktrace Threat Visualizer appliance through a local MCP server: read-only by default, previews for every change and human approval for critical actions.

GitHubOpen Website
darktrace-investigation

Investigate alerts, devices, incidents and response actions on a Darktrace Threat Visualizer appliance with the darktrace MCP tools. Use for any question about model breaches, AI Analyst incidents, devices, connections, Antigena, tags or Watched Domains. Read-only first, small responses, preview and human approval before any critical action.