一个模型上下文协议（MCP）服务器 使AI助手能够与Tenzir——一个数据——互动。 用于安全操作的管道引擎。

[!警告] 这个MCP服务器目前没有积极维护。 tenzir/skills 是取代它，且是 新工作正在发生的地方。

该MCP服务器提供执行用Tenzir编写的管道的工具 查询语言（TQL）），工作中 使用开放网络安全模式框架（OCSF），管理软件包，生成解析器，探索文档。

✨ 特色

• 流水线执行：运行TQL流水线和测试
• 文档访问：通过 交叉引用支持
• OCSF 集成：查询并处理 OCSF 定义、事件类， 物体和侧面。
• 包管理：与操作员一起创建和管理Tenzir包， 管道、浓缩环境与测试
• 代码生成：自动生成TQL解析器和OCSF映射包

📦 安装

使用 Docker 作为最快的入门方式：

或者当你有本地天齐尔时用uvx 安装：

📚 文献资料

请参阅我们的设置指南 用于安装和MCP客户端配置。

⚙️ Tenzir MCP Server

A Model Context Protocol (MCP) server that enables AI assistants to interact with Tenzir—a data pipeline engine for security operations.

[!WARNING] This MCP server is not actively maintained right now. tenzir/skills is superseding it and is where new work is happening.

This MCP server provides tools for executing pipelines written in the Tenzir Query Language (TQL)), working with Open Cybersecurity Schema Framework (OCSF), managing packages, generating parsers, and exploring documentation.

✨ Features

• Pipeline Execution: Run TQL pipelines and tests
• Documentation Access: Search and browse embedded Tenzir documentation with cross-reference support
• OCSF Integration: Query and work with OCSF definitions, event classes, objects, and profiles.
• Package Management: Create and manage Tenzir packages with operators, pipelines, enrichment contexts, and tests
• Code Generation: Auto-generate TQL parsers and OCSF mapping packages

📦 Installation

Use Docker as the fastest way to get started:

docker run -i tenzir/mcp

Or use uvx when you have a local Tenzir installation:

uvx tenzir-mcp

📚 Documentation

Consult our setup guide for installation and MCP client configuration.

We also provide a reference that explains usage and available tools.

🤝 Contributing

Want to contribute? We’re all-in on agentic coding with Claude Code! The repo comes pre-configured with our custom plugins—just clone and start hacking.

📜 License

This project is licensed under the Apache License 2.0.