sigma rules mcp for Windsurf

io.github.mrfentmen/sigma-rules-mcp

Sigma MCP: parse detection rules, validate ids, levels, statuses and detection blocks.

client:Windsurf transport:stdio runtime:npm

Install sigma rules mcp in Windsurf

~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json

{
  "mcpServers": {
    "sigma-rules-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@mrfentmen/sigma-rules-mcp"
      ]
    }
  }
}

Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs

sigma rules mcp in other clients

Claude Code
Claude Desktop
Cursor
VS Code
Zed
Cline
Gemini CLI
Grok
LangChain

sigma rules mcp MCP server