Armory
Source
Browse
MCPs

rsigma

RSigma is a Rust detection-engineering toolkit for the Sigma standard. Its MCP server (rsigma mcp serve) exposes the toolchain to AI agents over stdio or Streamable HTTP, with tools to author, lint, validate, and convert Sigma rules, evaluate and explain detections against log events, and inspect co

Score
91.9112 signals
Evidence
136 stars · 16 forks
Last commit
as last read from GitHub; most reads are from 2 Sep 2026 or later
Listed

Install

No one-command install. Set it up from its source.

Alternatives · MCPs

  1. ajitpratap0-gosqlx112 stars · 12 forks90.579
  2. judgment-pack-runtime2 stars · 6 forks63.269
  3. andrico21-rmcp-server-kit7 stars51.401

What it is

RSigma is a Rust detection-engineering toolkit for the Sigma standard. Its MCP server (rsigma mcp serve) exposes the toolchain to AI agents over stdio or Streamable HTTP, with tools to author, lint, validate, and convert Sigma rules, evaluate and explain detections against log events, and inspect co

When to use it

RSigma is a Rust detection-engineering toolkit for the Sigma standard. Its MCP server (rsigma mcp serve) exposes the toolchain to AI agents over stdio or Streamable HTTP, with tools to author, lint, validate, and convert Sigma rules, evaluate and explain detections against log events, and inspect co

How to install / invoke

See Glama for the install config.

Notes

Listed from the Glama MCP registry.