{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_jbyfmrxk3x33","handle":"iflow-mcp-gabbo01-zeek-mcp","url":"https://wellknown.network/agents/iflow-mcp-gabbo01-zeek-mcp","links":{"self":"https://wellknown.network/agents/iflow-mcp-gabbo01-zeek-mcp/record.json","html":"https://wellknown.network/agents/iflow-mcp-gabbo01-zeek-mcp","markdown":"https://wellknown.network/agents/iflow-mcp-gabbo01-zeek-mcp/record.md","api":"https://wellknown.network/api/v1/agents/iflow-mcp-gabbo01-zeek-mcp","status":"https://wellknown.network/api/v1/agents/iflow-mcp-gabbo01-zeek-mcp/status","claim":"https://wellknown.network/agents/iflow-mcp-gabbo01-zeek-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/iflow-mcp-gabbo01-zeek-mcp/claim.json","badge":"https://wellknown.network/agents/iflow-mcp-gabbo01-zeek-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/iflow-mcp-gabbo01-zeek-mcp/history","tools":"https://wellknown.network/api/v1/agents/iflow-mcp-gabbo01-zeek-mcp/tools"},"ard":{"identifier":"urn:air::server:iflow-mcp-gabbo01-zeek-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"iflow-mcp_gabbo01-zeek-mcp","summary":"MCP server for Zeek network security analysis","description":"[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://www.apache.org/licenses/LICENSE-2.0)\n[![GitHub release (latest by date)](https://img.shields.io/badge/release-v1.0-blue)](https://github.com/Gabbo01/Zeek-MCP/releases)\n[![Linkedin](https://img.shields.io/badge/Linked-in-blue)](https://www.linkedin.com/in/gabriele-bencivenga-93797b147/)\n\n![Logo](images/logo.png)\n\n# Zeek-MCP\n\nThis repository provides a set of utilities to build an MCP server (Model Context Protocol) that you can integrate with your conversational AI client.\n\n---\n\n## Table of Contents\n\n* [Prerequisites](#prerequisites)\n* [Installation](#installation)\n* [Usage](#usage)\n\n  * [1. Clone the repository](#1-clone-the-repository)\n  * [2. Install dependencies](#2-install-dependencies)\n  * [3. Run the MCP server](#3-run-the-mcp-server)\n  * [4. Use the MCP tools](#4-use-the-mcp-tools)\n* [Examples](#examples)\n* [License](#license)\n\n---\n\n## Prerequisites\n\n* **Python 3.7+**\n* **Zeek** installed and available in your `PATH` (for the `execzeek` tool)\n* **pip** (for installing Python dependencies)\n\n---\n\n## Installation\n\n### 1. Clone the repository\n\n```bash\ngit clone https://github.com/Gabbo01/Zeek-MCP\ncd Zeek-MCP\n```\n\n### 2. Install dependencies\n\nIt's recommended to use a virtual environment:\n\n```bash\npython -m venv venv\nsource venv/bin/activate    # Linux/macOS\nvenv\\Scripts\\activate     # Windows\npip install -r requirements.txt\n```\n\n> **Note:** If you don’t have a `requirements.txt`, install directly:\n>\n> ```bash\n> pip install pandas mcp\n> ```\n\n---\n\n## Usage\n\nThe repository exposes two main MCP tools and a command-line entry point:\n\n### 3. Run the MCP server\n\n```bash\npython Bridge_Zeek_MCP.py --mcp-host 127.0.0.1 --mcp-port 8081 --transport sse\n```\n\n* `--mcp-host`: Host for the MCP server (default: `127.0.0.1`).\n* `--mcp-port`: Port for the MCP server (default: `8081`).\n* `--transport`: Transport protocol, either `sse` (Server-Sent Events) or `stdio`.\n\n![start](images/start.png)\n\n### 4.…","publisher":null,"homepage":null,"repository":null,"version":"1.0.0","license":null,"protocols":["mcp"],"tags":["mcp"],"pricing":null,"endpoints":[{"url":"pypi:iflow-mcp_gabbo01-zeek-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","summary":"pypi","version":"pypi","description":"pypi"}},"derived":{"capabilities":[{"slug":"dev.version-control","name":"Version Control","confidence":1,"provenance":"derived"},{"slug":"dev.terminal","name":"Terminal & Shell","confidence":0.825,"provenance":"derived"}],"categories":["dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"iflow-mcp_gabbo01-zeek-mcp","registry":"pypi","observedAt":"2026-09-15T18:21:43.936Z","publishedAt":"2026-02-26T12:59:43.620680Z","latestVersion":"1.0.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"iflow-mcp_gabbo01-zeek-mcp","url":"https://pypi.org/project/iflow-mcp_gabbo01-zeek-mcp/","firstSeenAt":"2026-09-09T19:23:04.099Z","fetchedAt":"2026-09-15T18:19:34.014Z","normalizedAt":"2026-09-15T18:19:34.014Z"}]},"firstSeenAt":"2026-09-09T19:23:04.099Z","updatedAt":"2026-09-15T18:21:43.936Z"}