LabStore
← All labs

Vectra AI RUX MCP Server

by docker ✓ verified ✓ Packaged by Docker

Vectra AI MCP Server - An MCP server that connects AI assistants & agents to the Vectra AI security platform, enabling intelligent threat analysis and automated incident response.

MCP server installable needs setup network: on runtime: sysbox

AI & LLM MCP Servers

Vectra AI RUX MCP Server MCP Server

Vectra AI MCP Server - An MCP server that connects AI assistants & agents to the Vectra AI security platform, enabling intelligent threat analysis and automated incident response.

What is an MCP Server?

MCP Info

Attribute Details
Docker Image mcp/vectra-ai-rux-mcp-server
Author vectra-ai-research
Repository https://github.com/vectra-ai-research/vectra-ai-mcp-server

Image Building Info

Attribute Details
Dockerfile https://github.com/vectra-ai-research/vectra-ai-mcp-server/blob/df7e65b3e424ad94c7fe6b028e4c8cb67770266a/Dockerfile
Commit df7e65b3e424ad94c7fe6b028e4c8cb67770266a
Docker Image built by Docker Inc.
Docker Scout Health Score Docker Scout Health Score
Verify Signature COSIGN_REPOSITORY=mcp/signatures cosign verify mcp/vectra-ai-rux-mcp-server --key https://raw.githubusercontent.com/docker/keyring/refs/heads/main/public/mcp/latest.pub
Licence MIT License

Available Tools (25)

Tools provided by this Server Short Description
get_detection_details Get complete detailed information for a particular detection
list_detections_with_details List detections with filtering and sorting options with detailed information
get_detection_count Get the total count of detections matching the specified criteria
get_detection_pcap Get pcap file for a specific detection
list_entity_detections List all detections with full details for a specific entity
list_detections_with_basic_info List detections with basic information and filtering options
get_detection_summary Get a concise summary of a detection including ID, name, category, timestamp, and status
list_detection_ids List detection IDs with filtering and sorting options
list_entities List entities (hosts & accounts) in Vectra platform based on various filters
get_account_details Get complete detailed information about a specific account entity
lookup_entity_info_by_name Retrieve information about an entity (account or host) by its name
get_host_details Get complete detailed information about a specific host entity
lookup_host_by_ip Retrieve information about a host entity by its IP address
list_assignments List all investigation assignments with optional filtering by timestamp and resolved state
list_assignments_for_user List all investigation assignments assigned to a user/analyst
get_assignment_detail_by_id Retrieve details of a specific investigation assignment
get_assignment_for_entity Retrieve investigation assignment for a specific account or host
create_assignment Create investigation assignment for an account or host
create_entity_note Add an investigation note to an entity (host or account)
mark_detection_fixed Marks or unmark detection as fixed
delete_assignment Unassign or delete an investigation assignment by its ID
list_platform_users List users in the Vectra platform
list_lockdown_entities List entities that are currently in lockdown
Summarize Detection Get a detailed summary of a specific detection in Vectra AI platform
Visualize Entity Detections Visualize relationship of detections related to a specific entity in Vectra AI platform with an interactive graph

Tools Details

Tool: get_detection_details

Get complete detailed information for a particular detection

Tool: list_detections_with_details

List detections with filtering and sorting options with detailed information

Tool: get_detection_count

Get the total count of detections matching the specified criteria

Tool: get_detection_pcap

Get pcap file for a specific detection

Tool: list_entity_detections

List all detections with full details for a specific entity

Tool: list_detections_with_basic_info

List detections with basic information and filtering options

Tool: get_detection_summary

Get a concise summary of a detection including ID, name, category, timestamp, and status

Tool: list_detection_ids

List detection IDs with filtering and sorting options

Tool: list_entities

List entities (hosts & accounts) in Vectra platform based on various filters

Tool: get_account_details

Get complete detailed information about a specific account entity

Tool: lookup_entity_info_by_name

Retrieve information about an entity (account or host) by its name

Tool: get_host_details

Get complete detailed information about a specific host entity

Tool: lookup_host_by_ip

Retrieve information about a host entity by its IP address

Tool: list_assignments

List all investigation assignments with optional filtering by timestamp and resolved state

Tool: list_assignments_for_user

List all investigation assignments assigned to a user/analyst

Tool: get_assignment_detail_by_id

Retrieve details of a specific investigation assignment

Tool: get_assignment_for_entity

Retrieve investigation assignment for a specific account or host

Tool: create_assignment

Create investigation assignment for an account or host

Tool: create_entity_note

Add an investigation note to an entity (host or account)

Tool: mark_detection_fixed

Marks or unmark detection as fixed

Tool: delete_assignment

Unassign or delete an investigation assignment by its ID

Tool: list_platform_users

List users in the Vectra platform

Tool: list_lockdown_entities

List entities that are currently in lockdown

Tool: Summarize Detection

Get a detailed summary of a specific detection in Vectra AI platform

Tool: Visualize Entity Detections

Visualize relationship of detections related to a specific entity in Vectra AI platform with an interactive graph

Use this MCP Server

{
  "mcpServers": {
    "vectra-ai-rux-mcp-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "VECTRA_BASE_URL",
        "-e",
        "VECTRA_CLIENT_ID",
        "-e",
        "VECTRA_CLIENT_SECRET",
        "mcp/vectra-ai-rux-mcp-server"
      ],
      "env": {
        "VECTRA_BASE_URL": "https://123456789.ab1.portal.vectra.ai",
        "VECTRA_CLIENT_ID": "123456789",
        "VECTRA_CLIENT_SECRET": "<your service account token>"
      }
    }
  }
}

Why is it safer to run MCP Servers with Docker?