Install Wrg Sigma Rules in Claude Code
This server doesn't publish a package to a registry, so follow the install steps in its README. Once it runs, register it with Claude Code:
claude mcp add wrg-sigma-rules -- <command to start the server>Frequently asked questions
What does the Wrg Sigma Rules MCP server do?
Write, validate and convert Sigma detection rules for Splunk, Elastic, Kibana and Wazuh, backed by a rule corpus covering MITRE ATT&CK tactics.
Is the Wrg Sigma Rules MCP server free?
The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.
Does Wrg Sigma Rules run locally or remotely?
Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.
How do I add Wrg Sigma Rules to Claude Code?
Follow the install steps in the project's README at https://github.com/WRG-11/wrg-sigma-rules, then register it with "claude mcp add".
More security & identity MCP servers
View allAggrete
aggrete/aggrete
Policy proxy that refuses forbidden tool calls, stopping prompt-injection exfiltration and forbidden data combinations across Slack, Drive, GitHub and more.
Trustboost API
teodorofodocrispin-cmyk/trustboost-api
Redacts emails, phone numbers, national IDs, private keys and financial data before text reaches LLMs, in English, Spanish, Portuguese, German and Japanese.
gatehouse
nickgeorgeseo/mcp-gatehouse
Permission tiers, approval gates and secret-redacting audit logging enforced inside MCP servers at the tool boundary, with a demo order-desk server.
Truecopy
askalf/truecopy
Supply-chain gate for agent skills and MCP servers: detects poisoned tool definitions, pins servers by hash, checks drift in CI and proxies only pinned tools.
Lucairn Sdks
Declade/lucairn-sdks
Privacy gateway that sanitizes German and English PII before prompts reach an LLM and issues a signed, timestamped certificate for each call.
Sicarius Guard
Chronolapse411/sicarius-guard
Solana token safety oracle: byte-level SPL mint analysis, honeypot detection, freeze/mint authority checks, Birdeye market data and composite risk scoring.