Security operations teams that write detections and review alerts in Panther.
claude mcp add mcp-panther -e PANTHER_INSTANCE_URL=https://YOUR-PANTHER-INSTANCE.domain -e PANTHER_API_TOKEN=YOUR-API-KEY -- docker run -i -e PANTHER_INSTANCE_URL -e PANTHER_API_TOKEN --rm ghcr.io/panther-labs/mcp-pantherThird party software. By copying, downloading or installing it you accept the Academy legal notice: you are responsible for reviewing its code and permissions before use.
Loading the file...
The Panther MCP server lets an AI assistant work with Panther's SIEM platform in natural language. It helps write and tune detections from an IDE, query security logs, and triage, comment on and resolve one or many alerts.
Security operations teams that write detections and review alerts in Panther. The Panther MCP server lets an AI assistant work with Panther's SIEM platform in natural language. It helps write and tune detections from an IDE, query security logs, and triage, comment on and resolve one or many alerts.
Run this in your terminal: claude mcp add mcp-panther -e PANTHER_INSTANCE_URL=https://YOUR-PANTHER-INSTANCE.domain -e PANTHER_API_TOKEN=YOUR-API-KEY -- docker run -i -e PANTHER_INSTANCE_URL -e PANTHER_API_TOKEN --rm ghcr.io/panther-labs/mcp-panther
Yes. The code is on GitHub (panther-labs/mcp-panther) under the Apache-2.0 licence.
It passed our automatic scan for credential theft, hidden instructions and risky install commands. Third party open source software. Sabemos AI does not maintain it. Check the code and permissions before you connect it to company data.