What is mcp-panther?
mcp-panther is a MCP server by panther-labs that use Panther's SIEM platform in natural language to write detections, query logs and manage alerts. It is listed under Security and has 47 GitHub stars.
| Type | Mcp server |
|---|---|
| Author | panther-labs |
| Repository | panther-labs/mcp-panther |
| Popularity | 47 GitHub stars |
| Category | Security |
| Security | Review before installing (76/100) |
| Rank | #888 of 4,418 MCP servers; #43 in Security |
| License | Apache-2.0 |
| Last commit | 2026-10-09 |
| Runs | Cloud service |
| Language | Python |
| Platforms | macOS |
Is mcp-panther safe to install?
mcp-panther scores 76/100 on the MCPMods security check: Review before installing. Things to review: sends your data to a cloud service; can take actions such as send, write or deploy. It passed 4 of 6 checks.
MCP server results come from listing signals: who publishes it, where your data goes and what it can do. The code itself is not scanned yet.
| Check | Result |
|---|---|
| Published by the service itself | Pass |
| Sends your data to a cloud service | Review |
| No credentials mentioned | Pass |
| Can take actions such as send, write or deploy | Review |
| No code execution | Pass |
| Source on GitHub | Pass |
How do I install mcp-panther?
- Find the launch command. The README says how the server starts (npx, uvx, docker or a remote URL) and which API keys it needs.
https://github.com/panther-labs/mcp-panther
- Add it to Claude Code. Replace the part after -- with the command from the README. Remote servers use --transport http with a URL.
claude mcp add mcp-panther -- <command from README> claude mcp add --transport http mcp-panther <server-url>
- Check it connected. This lists your MCP servers and their status.
claude mcp list
Or ask Claude to set it up
Paste this into Claude Code and it installs mcp-panther for you:
Add the "mcp-panther" MCP server from https://github.com/panther-labs/mcp-panther to Claude Code. Read its README for the launch command and any API keys I need, run claude mcp add, then check that it connects.