
Sysdig MCP Server
概览
Starting with the next major release, the dedicated Sysdig Secure tools (list_runtime_events, get_event_info, get_event_process_tree) have been removed from this server. For Sysdig Secure use cases, install the new package, which provides comprehensive coverage of Sysdig Secure capabilities. This is an implementation of an MCP (Model Context Protocol) Server that exposes Sysdig Monitor capabilities to LLMs. New tools and functionalities will be added over time following semantic versioning. The goal is to provide a simple and easy-to-use interface for querying information from the Sysdig platform using LLMs. For Sysdig Secure-specific workflows, use the dedicated @sysdig/secure-mcp-server. Get up and running with the Sysdig MCP Server quickly using our pre-built Docker image. 1. : Go to your Sysdig instance and navigate to . This token is required to authenticate requests to the Sysdig Platform (See the Configuration section for more details).
README
以下为原文 README 节选,完整内容请查看原文。
Sysdig MCP Server
[!IMPORTANT] Breaking change — this MCP server now focuses on Sysdig Monitor.
Starting with the next major release, the dedicated Sysdig Secure tools (
list_runtime_events,get_event_info,get_event_process_tree) have been removed from this server. For Sysdig Secure use cases, install the new @sysdig/secure-mcp-server package, which provides comprehensive coverage of Sysdig Secure capabilities.
Table of contents
Description
This is an implementation of an MCP (Model Context Protocol) Server that exposes Sysdig Monitor capabilities to LLMs. New tools and functionalities will be added over time following semantic versioning. The goal is to provide a simple and easy-to-use interface for querying information from the Sysdig platform using LLMs.
For Sysdig Secure-specific workflows, use the dedicated @sysdig/secure-mcp-server.
Quickstart Guide
Get up and running with the Sysdig MCP Server quickly using our pre-built Docker image.
-
Get your API Token: Go to your Sysdig instance and navigate to Settings > Sysdig Monitor API. This token is required to authenticate requests to the Sysdig Platform (See the Configuration section for more details).
-
Configure your MCP client:
Add the server configuration to your MCP client (e.g., Claude Desktop’s
claude_desktop_config.json). Choose your preferred installation method from the Server Setup section. The Docker method is the easiest to get started with since it requires no local toolchain.Substitute the following placeholders with your actual values:
- ``: The hostname of your Sysdig instance (e.g.,
https://us2.app.sysdig.comorhttps://eu1.app.sysdig.com) - ``: Your Sysdig API token (Secure or Monitor)
- ``: The hostname of your Sysdig instance (e.g.,
Available Tools
安装
docker run -i --rm -e SYSDIG_MCP_API_HOST -e SYSDIG_MCP_TRANSPORT -e SYSDIG_MCP_API_TOKEN ghcr.io/sysdiglabs/sysdig-mcp-server:latest配置
{
"mcpServers": {
"sysdig-mcp-server": {
"command": "go",
"args": [
"run",
"github.com/sysdiglabs/sysdig-mcp-server/cmd/server@latest"
],
"env": {
"SYSDIG_MCP_API_HOST": "<your_sysdig_host>",
"SYSDIG_MCP_API_TOKEN": "<your_sysdig_api_token>",
"SYSDIG_MCP_TRANSPORT": "stdio"
}
}
}
}