alexgoller/illumio-mcp-server

Developer tools

このページは AI により自動翻訳されています。技術的な詳細は原文をご確認ください。原文を見る

13 stars 12 forks 品質 74 トレンド 40NOASSERTION

Repository Install

The first MCP server for cybersecurity

概要

— installation, getting started, workflows, the full tool reference, and central deployment. A Model Context Protocol (MCP) server that provides an interface to interact with Illumio PCE (Policy Compute Engine). This server enables programmatic access to Illumio workload management, label operations, traffic flow analysis, automated ringfencing, and infrastructure service identification. Use conversational AI to talk to your PCE: - on workloads, labels, IP lists, services, and rulesets - — summaries aggregate every flow the PCE returns, not the first 500, and report how much exists vs how much is shown - — app/env by default, or business unit, compliance scope, role+location; whatever dimensions your PCE defines - — which process talks to which provider, with attribution from RDAP and vendor-published ranges refreshed weekly in CI - — "only this binary may reach that app", via Windows egress services and service references in rules - — analyze traffic and create app-to-app...

README

以下は原文 README の抜粋です。原文を見る。

Illumio MCP Server

📚 Documentation site — installation, getting started, workflows, the full tool reference, and central deployment.

A Model Context Protocol (MCP) server that provides an interface to interact with Illumio PCE (Policy Compute Engine). This server enables programmatic access to Illumio workload management, label operations, traffic flow analysis, automated ringfencing, and infrastructure service identification.

What can it do?

Use conversational AI to talk to your PCE:

Full CRUD on workloads, labels, IP lists, services, and rulesets
Traffic analysis over the whole window — summaries aggregate every flow the PCE returns, not the first 500, and report how much exists vs how much is shown
Aggregate on any label — app/env by default, or business unit, compliance scope, role+location; whatever dimensions your PCE defines
Shadow-AI / egress discovery — which process talks to which provider, with attribution from RDAP and vendor-published ranges refreshed weekly in CI
Process-qualified policy — “only this binary may reach that app”, via Windows egress services and service references in rules
Automated ringfencing — analyze traffic and create app-to-app segmentation policies with one command
Selective enforcement — add deny rules for apps in selective mode with configurable consumer flavors

GitHub で README 全文を見る

インストール

docker run -i --init --rm -v /Users/YOUR_USERNAME/tmp:/var/log/illumio-mcp -e DOCKER_CONTAINER=true -e PYTHONWARNINGS=ignore --env-file /Users/YOUR_USERNAME/.illumio-mcp.env illumio-mcp:latest

MCP 初心者？mcpskill.org のガイドから始めましょう →

設定

"mcpServers": {
    "illumio-mcp": {
      "command": "uv",
      "args": [
        "--directory",
        "/path/to/illumio-mcp-server",
        "run",
        "illumio-mcp"
      ],
      "env": {
        "PCE_HOST": "your-pce-host",
        "PCE_PORT": "your-pce-port",
        "PCE_ORG_ID": "1",
        "API_KEY": "api_key",
        "API_SECRET": "api_secret"
      }
    }
  }
}