Skip to content

crowdsentinel mcp server for Grok

io.github.thomasxm/crowdsentinel-mcp-server

AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics

client:Grok transport:stdio runtime:pypi

Install crowdsentinel mcp server in Grok

.mcp.json (in your project root)

Held in this page only — never stored, logged, or sent anywhere but back to your screen.

{
  "mcpServers": {
    "crowdsentinel-mcp-server": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "crowdsentinel-mcp-server"
      ],
      "env": {
        "ELASTICSEARCH_HOSTS": "<ELASTICSEARCH_HOSTS>",
        "ELASTICSEARCH_CLOUD_ID": "<ELASTICSEARCH_CLOUD_ID>",
        "ELASTICSEARCH_API_KEY": "<ELASTICSEARCH_API_KEY>",
        "ELASTICSEARCH_USERNAME": "<ELASTICSEARCH_USERNAME>",
        "ELASTICSEARCH_PASSWORD": "<ELASTICSEARCH_PASSWORD>",
        "ELASTICSEARCH_BEARER_TOKEN": "<ELASTICSEARCH_BEARER_TOKEN>",
        "VERIFY_CERTS": "<VERIFY_CERTS>",
        "REQUEST_TIMEOUT": "<REQUEST_TIMEOUT>"
      }
    }
  }
}

Grok Build reads Claude Code's .mcp.json and Claude Desktop's config unchanged, so a server you have already set up there needs nothing new. The Grok web app and X integration do not take custom servers. Grok docs

crowdsentinel mcp server in other clients