Security Detections MCP

{
  "agent_id": "security_detections_mcp",
  "name": "Security Detections MCP",
  "url": "https://detect.michaelhaag.org",
  "logo": "https://github.com/mhaggis.png?size=200",
  "niche": null,
  "category": null,
  "short_summary": "An MCP server for querying and indexing security detection rules from Sigma, Splunk ESCU, Elastic, KQL, Sublime, and CrowdStrike CQL repositories. Supports loc…",
  "task_performed": "unclear",
  "inputs_accepted": [],
  "outputs_produced": [],
  "integrations_available": [],
  "protocols_or_interfaces": [
    "MCP"
  ],
  "industry_fit": [],
  "autonomy_level": "unclear",
  "human_approval_needed": "unclear",
  "pricing_model": "unclear",
  "price": {
    "observed": true,
    "billing": "freemium",
    "source_kind": "vendor",
    "currency": "USD",
    "lowest_monthly_usd": 25,
    "monthly_usd": 25,
    "headline": "Free plan; paid from $25/mo; $20.83/mo equivalent billed annually",
    "commercial": {
      "entry_offer": {
        "line": "Pro",
        "monthly_native": 25,
        "monthly_usd": 25,
        "commitment": "monthly",
        "basis": "$25/month",
        "billing_verified": true
      },
      "annual_option": {
        "line": "Pro (annual billing)",
        "monthly_equivalent_native": 20.83,
        "total_native": 250
      },
      "currency": "USD",
      "lines": [
        {
          "name": "Free",
          "price": "$0",
          "kind": "free",
          "billed": "monthly"
        },
        {
          "name": "Pro",
          "price": "$25 /mo",
          "kind": "base_subscription",
          "billed": "monthly"
        },
        {
          "name": "Pro (annual billing)",
          "price": "$250/year billed annually",
          "kind": "base_subscription",
          "billed": "annually"
        }
      ]
    },
    "summary": "Free plan; paid from $25/mo; $20.83/mo equivalent billed annually. Security Detections offers a free tier and a Pro plan at $25 per month or $250 per year.",
    "confidence": "medium",
    "source_url": "https://detect.michaelhaag.org/",
    "checked_at": "2026-11-01T02:11:32.583Z",
    "amount": 25,
    "display": "From $25/mo",
    "plans": [
      {
        "name": "Free",
        "price": "$0",
        "period": null,
        "persona": "free",
        "highlights": [
          "Browse all 9,822 detections",
          "Coverage dashboards",
          "Threat actor profiles",
          "20 AI chats/day using open-source models"
        ],
        "promo_note": null,
        "price_promo": null,
        "price_annual": null
      },
      {
        "name": "Pro",
        "price": "$25 /mo",
        "period": "month",
        "persona": "pro",
        "highlights": [
          "Unlimited AI chats with frontier models",
          "Claude Sonnet 4.6, GPT-5.4, Codex, and Opus",
          "Bring your own Claude or OpenAI API key",
          "Priority support and feature requests"
        ],
        "promo_note": null,
        "price_promo": null,
        "price_annual": "$250/year"
      }
    ],
    "source": "render+llm"
  },
  "trust_or_rating_signal": [],
  "evidence_quality": "unclear",
  "entity_type": "mcp_server",
  "regulated_data_suitability": "unclear",
  "evidence_urls": [
    "https://detect.michaelhaag.org",
    "https://github.com/mhaggis/security-detections-mcp"
  ],
  "last_checked": "2026-11-01",
  "profile_checked": null,
  "price_checked": "2026-11-01",
  "how_to_connect": {
    "website": "https://detect.michaelhaag.org",
    "docs": null,
    "mcp": null,
    "a2a": null,
    "api": null,
    "protocols": [
      "MCP"
    ],
    "install": null,
    "repository": "https://github.com/mhaggis/security-detections-mcp",
    "note": "Speaks MCP but publishes no endpoint we could verify — check the docs/website."
  },
  "deployment": {
    "model": "unknown",
    "both_offered": false,
    "hosted_endpoint": null,
    "install": null,
    "note": "No deployment evidence held — Agentery has no endpoint, install instruction or directory attribute for this listing.",
    "evidence": {
      "sources": [
        "page_text:licence"
      ],
      "excerpt": null,
      "url": "https://detect.michaelhaag.org/",
      "observed_day": "2026-11-01",
      "age_days": 0,
      "hosted_evidence": null,
      "rule": "deploy-v1"
    }
  },
  "licence": {
    "name": "APACHE",
    "note": "Named licence as published; applies to the code, not to where it runs.",
    "evidence": "page text: \"tions v3.2 GitHub Built by Michael Haag Apache 2.0\"",
    "observed_day": "2026-11-01",
    "age_days": 0
  },
  "evidence_checks": {
    "price": {
      "source_url": "https://detect.michaelhaag.org/",
      "last_observed_day": "2026-11-01",
      "age_days": 0,
      "verified_day": "2026-11-01",
      "note": "verified = the page-text gate ran for that scan day (day-before/day-of text check)"
    },
    "agent_card": {
      "status": "unknown",
      "note": "no Agent Card URL recorded for this listing"
    },
    "endpoint": {
      "status": "unknown",
      "note": "endpoint not yet checked"
    }
  },
  "product_group": {
    "group_id": 2,
    "group": "Cybersecurity operations",
    "change_90d_pct": -4.32,
    "fair_price_by_tier_monthly_usd": {
      "individual": 19,
      "pro": 50,
      "team / small business": 224.96,
      "enterprise": 541.67
    },
    "note": "Change of the group's price index over the last 90 days. Call get_group_fair_price with group_id for tier and payment-model detail.",
    "page": "https://agentery.com/aepi/groups/2"
  },
  "liveness": {
    "probed": true,
    "alive": true,
    "endpoint_kind": "site",
    "latency_ms": 1451,
    "uptime_7d": 1,
    "checked_at": "2026-11-01T02:44:10.895Z",
    "consecutive_failures": 0,
    "status": "alive"
  },
  "price_extras": {
    "free_tier": null,
    "unit_cost": null
  },
  "reported_success": null,
  "feedback": "If you actually use this provider, call report_outcome with the result. Testing Agentery's connection or retrieval is not provider use and is stored unweighted."
}