OfficialLocalFree

Rsigma MCP server

timescale/rsigma

Author, lint, validate and convert Sigma detection rules with RSigma, evaluate and explain detections against log events, and inspect correlation state.

178 GitHub stars18 forks

Install Rsigma in Claude Code

This server doesn't publish a package to a registry, so follow the install steps in its README. Once it runs, register it with Claude Code:

Claude Code
claude mcp add rsigma -- <command to start the server>

Frequently asked questions

What does the Rsigma MCP server do?

Author, lint, validate and convert Sigma detection rules with RSigma, evaluate and explain detections against log events, and inspect correlation state.

Is the Rsigma MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does Rsigma run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add Rsigma to Claude Code?

Follow the install steps in the project's README at https://github.com/timescale/rsigma, then register it with "claude mcp add".

More security & identity MCP servers

View all