sigma rules mcp for VS Code
io.github.mrfentmen/sigma-rules-mcp
Sigma MCP: parse detection rules, validate ids, levels, statuses and detection blocks.
client:VS Code
transport:stdio
runtime:npm
Install sigma rules mcp in VS Code
.vscode/mcp.json
{
"servers": {
"sigma-rules-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@mrfentmen/sigma-rules-mcp"
]
}
}
}
Requires agent mode. MCP: Open User Configuration puts the same block in every workspace. VS Code docs