alexgoller/illumio-mcp-server
Developer toolsЭта страница переведена автоматически. Технические детали смотрите в оригинале. Открыть оригинал
The first MCP server for cybersecurity
Обзор
— installation, getting started, workflows, the full tool reference, and central deployment. A Model Context Protocol (MCP) server that provides an interface to interact with Illumio PCE (Policy Compute Engine). This server enables programmatic access to Illumio workload management, label operations, traffic flow analysis, automated ringfencing, and infrastructure service identification. Use conversational AI to talk to your PCE: - on workloads, labels, IP lists, services, and rulesets - — summaries aggregate every flow the PCE returns, not the first 500, and report how much exists vs how much is shown - — app/env by default, or business unit, compliance scope, role+location; whatever dimensions your PCE defines - — which process talks to which provider, with attribution from RDAP and vendor-published ranges refreshed weekly in CI - — "only this binary may reach that app", via Windows egress services and service references in rules - — analyze traffic and create app-to-app...
README
Показан фрагмент оригинального README. Открыть оригинал.
Illumio MCP Server
📚 Documentation site — installation, getting started, workflows, the full tool reference, and central deployment.
A Model Context Protocol (MCP) server that provides an interface to interact with Illumio PCE (Policy Compute Engine). This server enables programmatic access to Illumio workload management, label operations, traffic flow analysis, automated ringfencing, and infrastructure service identification.
What can it do?
Use conversational AI to talk to your PCE:
- Full CRUD on workloads, labels, IP lists, services, and rulesets
- Traffic analysis over the whole window — summaries aggregate every flow the PCE returns, not the first 500, and report how much exists vs how much is shown
- Aggregate on any label —
app/envby default, or business unit, compliance scope, role+location; whatever dimensions your PCE defines - Shadow-AI / egress discovery — which process talks to which provider, with attribution from RDAP and vendor-published ranges refreshed weekly in CI
- Process-qualified policy — “only this binary may reach that app”, via Windows egress services and service references in rules
- Automated ringfencing — analyze traffic and create app-to-app segmentation policies with one command
- Selective enforcement — add deny rules for apps in selective mode with configurable consumer flavors
Установка
docker run -i --init --rm -v /Users/YOUR_USERNAME/tmp:/var/log/illumio-mcp -e DOCKER_CONTAINER=true -e PYTHONWARNINGS=ignore --env-file /Users/YOUR_USERNAME/.illumio-mcp.env illumio-mcp:latestКонфигурация
"mcpServers": {
"illumio-mcp": {
"command": "uv",
"args": [
"--directory",
"/path/to/illumio-mcp-server",
"run",
"illumio-mcp"
],
"env": {
"PCE_HOST": "your-pce-host",
"PCE_PORT": "your-pce-port",
"PCE_ORG_ID": "1",
"API_KEY": "api_key",
"API_SECRET": "api_secret"
}
}
}
}