Vectra AI RUX MCP Server

Vectra AI RUX MCP Server MCP Server

Vectra AI MCP Server - An MCP server that connects AI assistants & agents to the Vectra AI security platform, enabling intelligent threat analysis and automated incident response.

What is an MCP Server?⁠

MCP Info

Image Building Info

Attribute	Details
Dockerfile	https://github.com/vectra-ai-research/vectra-ai-mcp-server/blob/df7e65b3e424ad94c7fe6b028e4c8cb67770266a/Dockerfile⁠
Commit	df7e65b3e424ad94c7fe6b028e4c8cb67770266a
Docker Image built by	Docker Inc.
Docker Scout Health Score
Verify Signature	COSIGN_REPOSITORY=mcp/signatures cosign verify mcp/vectra-ai-rux-mcp-server --key https://raw.githubusercontent.com/docker/keyring/refs/heads/main/public/mcp/latest.pub
Licence	MIT License

Available Tools (25)

Tools Details

Tool: get_detection_details

Get complete detailed information for a particular detection

Tool: list_detections_with_details

List detections with filtering and sorting options with detailed information

Tool: get_detection_count

Get the total count of detections matching the specified criteria

Tool: get_detection_pcap

Get pcap file for a specific detection

Tool: list_entity_detections

List all detections with full details for a specific entity

Tool: list_detections_with_basic_info

List detections with basic information and filtering options

Tool: get_detection_summary

Get a concise summary of a detection including ID, name, category, timestamp, and status

Tool: list_detection_ids

List detection IDs with filtering and sorting options

Tool: list_entities

List entities (hosts & accounts) in Vectra platform based on various filters

Tool: get_account_details

Get complete detailed information about a specific account entity

Tool: lookup_entity_info_by_name

Retrieve information about an entity (account or host) by its name

Tool: get_host_details

Get complete detailed information about a specific host entity

Tool: lookup_host_by_ip

Retrieve information about a host entity by its IP address

Tool: list_assignments

List all investigation assignments with optional filtering by timestamp and resolved state

Tool: list_assignments_for_user

List all investigation assignments assigned to a user/analyst

Tool: get_assignment_detail_by_id

Retrieve details of a specific investigation assignment

Tool: get_assignment_for_entity

Retrieve investigation assignment for a specific account or host

Tool: create_assignment

Create investigation assignment for an account or host

Tool: create_entity_note

Add an investigation note to an entity (host or account)

Tool: mark_detection_fixed

Marks or unmark detection as fixed

Tool: delete_assignment

Unassign or delete an investigation assignment by its ID

Tool: list_platform_users

List users in the Vectra platform

Tool: list_lockdown_entities

List entities that are currently in lockdown

Tool: Summarize Detection

Get a detailed summary of a specific detection in Vectra AI platform

Tool: Visualize Entity Detections

Visualize relationship of detections related to a specific entity in Vectra AI platform with an interactive graph

Use this MCP Server

{
  "mcpServers": {
    "vectra-ai-rux-mcp-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "VECTRA_BASE_URL",
        "-e",
        "VECTRA_CLIENT_ID",
        "-e",
        "VECTRA_CLIENT_SECRET",
        "mcp/vectra-ai-rux-mcp-server"
      ],
      "env": {
        "VECTRA_BASE_URL": "https://123456789.ab1.portal.vectra.ai",
        "VECTRA_CLIENT_ID": "123456789",
        "VECTRA_CLIENT_SECRET": "<your service account token>"
      }
    }
  }
}

Why is it safer to run MCP Servers with Docker?⁠