# Cisco XDR MCP Server

**Canonical:** https://apis.io/apis/cisco-xdr/cisco-xdr-mcp-server/  
**Provider:** Cisco XDR — https://apis.io/providers/cisco-xdr/  
**Base URL:** https://visibility.amp.cisco.com  
**Documentation:** https://github.com/CiscoDevNet/xdr-mcp-community

Cisco XDR MCP Server is one of 50 APIs that [Cisco XDR](https://apis.io/providers/cisco-xdr/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Security, XDR, MCP, Agents, and Threat Detection. The published artifact set on APIs.io includes API documentation.

Model Context Protocol server published by CiscoDevNet exposing 27 Cisco XDR tools across Inspect, Investigate, Incidents, Response Actions, Casebooks, Threat Intel, Workflows and Admin, plus 5 resources and 6 prompts. Apache-2.0, TypeScript, stdio transport only — there is no hosted endpoint and the package is not on npm, so a human must clone and build it before any agent can reach Cisco XDR through it.

## Machine-readable artifacts (5)

- **MCPServer** — https://raw.githubusercontent.com/api-evangelist/cisco-xdr/refs/heads/main/mcp/cisco-xdr-mcp.yml
- **MCPServer** — https://github.com/CiscoDevNet/xdr-mcp-community
- **ToolCrosswalk** — https://raw.githubusercontent.com/api-evangelist/cisco-xdr/refs/heads/main/mcp/cisco-xdr-tool-crosswalk.yml
- **AgentSkill** — https://raw.githubusercontent.com/api-evangelist/cisco-xdr/refs/heads/main/skills/_index.yml
- **Documentation** — https://github.com/CiscoDevNet/xdr-mcp-community/blob/main/INSTALL.md

## Other Cisco XDR APIs (12)

- [Cisco XDR Actor API](https://apis.io/apis/cisco-xdr/cisco-xdr-actor-api/)
- [Cisco XDR Asset API](https://apis.io/apis/cisco-xdr/cisco-xdr-asset-api/)
- [Cisco XDR Asset Mapping API](https://apis.io/apis/cisco-xdr/cisco-xdr-asset-mapping-api/)
- [Cisco XDR Asset Properties API](https://apis.io/apis/cisco-xdr/cisco-xdr-asset-properties-api/)
- [Cisco XDR Attack Pattern API](https://apis.io/apis/cisco-xdr/cisco-xdr-attack-pattern-api/)
- [Cisco XDR Bulk API](https://apis.io/apis/cisco-xdr/cisco-xdr-bulk-api/)
- [Cisco XDR Bundle API](https://apis.io/apis/cisco-xdr/cisco-xdr-bundle-api/)
- [Cisco XDR Campaign API](https://apis.io/apis/cisco-xdr/cisco-xdr-campaign-api/)
- [Cisco XDR Casebook API](https://apis.io/apis/cisco-xdr/cisco-xdr-casebook-api/)
- [Cisco XDR COA API](https://apis.io/apis/cisco-xdr/cisco-xdr-coa-api/)
- [Cisco XDR Deliberate API](https://apis.io/apis/cisco-xdr/cisco-xdr-deliberate-api/)
- [Cisco XDR Event API](https://apis.io/apis/cisco-xdr/cisco-xdr-event-api/)

## Tags

Security, XDR, MCP, Agents, Threat Detection

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/cisco-xdr/cisco-xdr-mcp-server/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/cisco-xdr/.