santa-mcp

by pmarkowsky

6 stars
271 downloads
Not rated
GitHub

About

santa-mcp is a Proof of Concept (PoC) Model Context Protocol (MCP) server for Santa, a security tool from North Pole Security. It allows an LLM with an MCP client to connect and drive Santa, enabling querying and control via natural language.

Details

Author
pmarkowsky
GitHub stars
6
Downloads
271
Categories
Other

- Provides four tools to interact with Santa.
- Proof of Concept, not production-ready.
- Uses MCP Golang library.
- Integrates with Claude Desktop.
- Allows querying why Santa blocks actions.
- Connects and drives Santa via an LLM.

Install Claude Desktop, run make to build the binary, copy it to a known path, and edit claude_desktop_config.json to point to the binary. Copy that config to ~/Library/Application Support/Claude/ and open Claude Desktop — four tools become available: santactl_fileinfo, santactl_status, santactl_sync, and santactl_version. You can then ask questions like "Why is Santa blocking osascript?"

santa-mcp

A PoC MCP Server for Santa.

What is this?

> [!CAUTION]
> This is intended solely as a demonstration and is not production-ready. It is not an officially supported product of North Pole Security.

This is a Proof of Concept Model Context Procotol server for santactl.

It allows you to connect and drive Santa via an LLM that implements an MCP
client.

Example session With Claude Desktop

Session with Claude

Quickstart

Install Claude Desktop if you don't already have it.
Run make
Copy the santa-mcp binary somewhere on your system
Edit the claude_desktop_config.json to point to the path from the previous
step
Copy the claude_desktop_config.json file to your ~/Library
cp claude_desktop_config.json ~/Library/Application\ Support/Claude/
Open Claude desktop you should see 4 tools
santactl_fileinfo
santactl_status
santactl_sync
santactl_version

  • Ask it questions about Santa e.g. Why is Santa blocking osascript?`

Dependencies

This depends on MCP Golang.

No reviews yet — be the first

Sign in to leave a review

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.