crowdsecurity/crowdsec-local-mcp

** 생활은 너무 짧은 YAML을 작성, 그냥 잘 부탁!**

CrowdSec WAF 규칙 및 Scenarios를 생성, 검증 및 배포하는 모델 Context Protocol (MCP) 서버.

특징

WAF 규칙 특징

• **WAF 규칙 생성 **: 사용자 입력 또는 CVE 참조에서 CrowdSec WAF 규칙 생성
• ** 신청**: WAF 규칙의 구문 결정
• Linting: WAF 규칙을 개선하기 위해 경고와 힌트를 얻으십시오.
• Deployment Guide: 단계별 배포 지침
• Docker Test 마구: CrowdSec + nginx + false Positives/negatives를 위한 운동 규칙에 도약기
• Nuclei Lookup: 공식 projectdiscovery/nuclei-templates]의 기존 템플릿으로 빠르게 이동

Scenarios 특징

• CrowdSec Scenarios Generation: CrowdSec 시나리오 생성
• ** 신청**: 시나리오의 구문 결정
• Linting: 경고와 힌트를 가져와 시나리오를 개선
• Deployment Guide: 단계별 배포 지침
• Docker Test 마구: CrowdSec을 테스트 시나리오 동작

데모

WAF 규칙 창조와 테스트

• 자연 언어의 규칙 작성
• CVE 참조의 규칙 생성

Life is too short to write YAML, just ask nicely!

A Model Context Protocol (MCP) server to generate, validate, and deploy CrowdSec WAF rules & Scenarios.

Features

WAF Rules Features

• WAF Rule Generation: Generate CrowdSec WAF rules from user input or a CVE reference
• Validation: Validate syntaxical correctness of WAF rules
• Linting: Get warnings and hints to improve your WAF rules
• Deployment Guide: Step-by-step deployment instructions
• Docker Test Harness: Spin up CrowdSec + nginx + bouncer to exercise rules for false positives/negatives
• Nuclei Lookup: Quickly jump to existing templates in the official projectdiscovery/nuclei-templates repository for a given CVE

Scenarios Features

• CrowdSec Scenarios Generation: Generate CrowdSec scenarios
• Validation: Validate syntaxical correctness of scenarios
• Linting: Get warnings and hints to improve your scenarios
• Deployment Guide: Step-by-step deployment instructions
• Docker Test Harness: Spin up CrowdSec to test scenario behavior

Demo

WAF Rules Creation and testing

• Rule creation from natural language
• Rule creation from CVE reference

Scenario Creation and testing

• Rule creation on HTTP events
• Rule creation based on GeoLocation factors

Prerequisites

• uv 0.4 or newer, which provides the uvx runner used in the examples below.
• Docker with the Compose plugin (Compose v2).

Installation

You can install the MCP using uvx or use packaged .mcpb file for claude code.

Using .mcpb package

If you’re using claude desktop, you can configure the MCP directly by double-clicking the .mcpb file that accompanies the release.

[!IMPORTANT] On MacOS, configure uv path in the extension settings if uv isn’t installed in the standard path.

Using uvx

• Configure supported clients automatically with uvx --from crowdsec-local-mcp init , where `` is one of claude-desktop, claude-code, chatgpt, vscode, or stdio:

uvx --from crowdsec-local-mcp init --dry-run claude-code

Run uvx --from crowdsec-local-mcp init --help to see all flags and supported targets.

What init configures

The init helper writes the CrowdSec MCP server definition into the client’s JSON configuration:

• claude-desktop → claude_desktop_config.json in the Claude Desktop settings directory
• claude-code → invoke claude mcp command with needed args