Panther Labs

This MCP server provides direct integration with Panther Labs' cybersecurity platform, enabling AI assistants to interact with security alerts, execute data lake queries, manage detection rules, and analyze log sources through both GraphQL and REST APIs. Built by Panther Labs with comprehensive tooling across alerts (triage, commenting, status updates), data analysis (SQL querying, log sampling, schema management), rules (creation, modification, testing), and metrics (alert patterns, data ingestion), it supports role-based permissions and includes specialized prompts for security workflows like alert triage and detection error analysis. The implementation is designed for security analysts and engineers who want to leverage AI for incident response, threat hunting, rule development, and security operations automation within their existing Panther deployment.

Source

Repository: https://github.com/panther-labs/mcp-panther