alexgoller/illumio-mcp-server

Developer tools

이 페이지는 AI로 자동 번역되었습니다. 기술적인 세부 사항은 원문을 확인하세요. 원문 보기

12 stars 12 forks 품질 74 트렌드 28NOASSERTION

Repository Install

The first MCP server for cybersecurity

개요

— installation, getting started, workflows, the full tool reference, and central deployment. A Model Context Protocol (MCP) server that provides an interface to interact with Illumio PCE (Policy Compute Engine). This server enables programmatic access to Illumio workload management, label operations, traffic flow analysis, automated ringfencing, and infrastructure service identification. Use conversational AI to talk to your PCE: - on workloads, labels, IP lists, services, and rulesets - — summaries aggregate every flow the PCE returns, not the first 500, and report how much exists vs how much is shown - — app/env by default, or business unit, compliance scope, role+location; whatever dimensions your PCE defines - — which process talks to which provider, with attribution from RDAP and vendor-published ranges refreshed weekly in CI - — "only this binary may reach that app", via Windows egress services and service references in rules - — analyze traffic and create app-to-app...

README

원문 README의 일부입니다. 원문 보기.

Illumio MCP Server

📚 Documentation site — installation, getting started, workflows, the full tool reference, and central deployment.

A Model Context Protocol (MCP) server that provides an interface to interact with Illumio PCE (Policy Compute Engine). This server enables programmatic access to Illumio workload management, label operations, traffic flow analysis, automated ringfencing, and infrastructure service identification.

What can it do?

Use conversational AI to talk to your PCE:

Full CRUD on workloads, labels, IP lists, services, and rulesets
Traffic analysis over the whole window — summaries aggregate every flow the PCE returns, not the first 500, and report how much exists vs how much is shown
Aggregate on any label — app/env by default, or business unit, compliance scope, role+location; whatever dimensions your PCE defines
Shadow-AI / egress discovery — which process talks to which provider, with attribution from RDAP and vendor-published ranges refreshed weekly in CI
Process-qualified policy — “only this binary may reach that app”, via Windows egress services and service references in rules
Automated ringfencing — analyze traffic and create app-to-app segmentation policies with one command
Selective enforcement — add deny rules for apps in selective mode with configurable consumer flavors

GitHub에서 전체 README 보기

설치

docker run -i --init --rm -v /Users/YOUR_USERNAME/tmp:/var/log/illumio-mcp -e DOCKER_CONTAINER=true -e PYTHONWARNINGS=ignore --env-file /Users/YOUR_USERNAME/.illumio-mcp.env illumio-mcp:latest

MCP 초보자라면? mcpskill.org 가이드부터 시작하세요 →

설정

"mcpServers": {
    "illumio-mcp": {
      "command": "uv",
      "args": [
        "--directory",
        "/path/to/illumio-mcp-server",
        "run",
        "illumio-mcp"
      ],
      "env": {
        "PCE_HOST": "your-pce-host",
        "PCE_PORT": "your-pce-port",
        "PCE_ORG_ID": "1",
        "API_KEY": "api_key",
        "API_SECRET": "api_secret"
      }
    }
  }
}