Why this fit
Teams evaluating AI models, assistants and generative workflows, particularly search and retrieval, teams avoiding vendor lock-in — free to start.
AI / Catalogue record
Free
Catalogue record
malcolm.fyi
Malcolm
nagameTW/mcp-server- 🐍 🏠 🍎 🪟 🐧 - The first MCP server for Malcolm, the open-source network traffic analysis suite (Zeek + Suricata + Arkime...
Checked Oct 27, 2026Evidence completeness: evidence — not yet recorded: repository signal
Field notes
Useful context before you commit.
nagameTW/mcp-server- 🐍 🏠 🍎 🪟 🐧 - The first MCP server for Malcolm, the open-source network traffic analysis suite (Zeek + Suricata + Arkime + OpenSearch + NetBox). Gives AI agents structured, threat-hunting access: search and aggregate traffic, discover fields, query Suricata alerts, browse Arkime sessions, and resolve NetBox assets. Read-only by default; opt-in, audited write classes for alerts, tagging, hunts, and PCAP upload. pip install mcp-server-malcolm
Best for
Teams evaluating AI models, assistants and generative workflows, particularly search and retrieval, teams avoiding vendor lock-in — free to start.
Known limitations
Teams that need a vendor SLA before adopting a free tool — check the project's support terms first.
Verify current plan terms with the provider.
Evidence summary
Known limitations
Teams that need a vendor SLA before adopting a free tool — check the project's support terms first.
Catalogue confidence
Catalogue data checked Oct 27, 2026.
Oryxen catalogue record without GitHub-backed evidence.
Public record assistant
Ask about Malcolm
Evidence-bound answers from this catalogue record. No workspace data is used.
Sign in to ask Oryxen AI about this record
The database-first brief above stays free for everyone.
Record provenance
What this record is based on.
Oryxen distinguishes catalogue metadata from repository context. These signals describe the directory record and its sources; they do not guarantee the current availability, security, or suitability of an external product.
- Listing status
- Listed in active catalogue
- Freshness
- Catalogue updated Oct 27, 2026
- Source
- Oryxen catalogue record
Key links
Keep researching this tool
Community signal
Practical notes from users.
Feedback is public only after moderation. It is distinct from README-derived project context.
Add your signal
Used this tool?
Sign in to submit feedback for moderation.
Don't miss — compare before you commit
Top 4 alternatives to Malcolm you should see.
Same category · honest pricing & fit — click any card to compare.