sigma rules mcp for Grok
io.github.mrfentmen/sigma-rules-mcp
Sigma MCP: parse detection rules, validate ids, levels, statuses and detection blocks.
client:Grok
transport:stdio
runtime:npm
Install sigma rules mcp in Grok
.mcp.json (in your project root)
{
"mcpServers": {
"sigma-rules-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@mrfentmen/sigma-rules-mcp"
]
}
}
}
Grok Build reads Claude Code's .mcp.json and Claude Desktop's config unchanged, so a server you have already set up there needs nothing new. The Grok web app and X integration do not take custom servers. Grok docs