Skip to directory

About Tenzir

Tenzir MCP server for security data pipelines, TQL execution, OCSF schema lookup, documentation search, parser generation, and package management. The maintainer says it is not actively maintained and that Tenzir skills supersede it.

What you can use it for

  • Execute and test TQL pipelines.
  • Explore OCSF schemas and Tenzir documentation.
  • Generate parsers and manage packages.
Connection and setup
Hosting
hosted
Transport
Not documented
Endpoint
Local process; no hosted endpoint documented
Authentication
Not documented

Setup steps

  1. Use the official repository installation instructions: https://github.com/tenzir/mcp.
Tools 15+

The 15 exact tool names correspond to the official repository registrations. The repository README explicitly warns that the MCP server is not actively maintained; tenzir/skills is the successor for new work.

  • make_ocsf_mapping

    Generate an OCSF mapping package from source data.

    01
  • make_parser

    Generate a TQL parser for a data format.

    02
  • docs_read

    Read a page from the embedded Tenzir documentation.

    03
  • docs_search

    Search embedded Tenzir documentation.

    04
  • run_pipeline

    Execute a TQL pipeline using the local Tenzir binary.

    05
  • run_test

    Run tests for Tenzir pipelines.

    06
  • ocsf_get_class

    Retrieve an OCSF event class.

    07
  • ocsf_get_classes

    List OCSF event classes.

    08
  • ocsf_get_latest_version

    Get the latest embedded OCSF schema version.

    09
  • ocsf_get_object

    Retrieve an OCSF object definition.

    10
  • ocsf_get_versions

    List available OCSF schema versions.

    11
  • package_add_changelog

    Add a changelog entry to a Tenzir package.

    12
  • package_add_operator

    Add an operator to a Tenzir package.

    13
  • package_add_test

    Add a test to a Tenzir package.

    14
  • package_create

    Create a Tenzir package.

    15

This server’s available tools can vary by account, permissions, or configuration. The list shown is not its full runtime catalog.

Limitations and notes
  • Not actively maintained; the maintainer points new work to tenzir/skills.
Original sources
  • official maintainer repository

    Current README documents installation and feature areas, explicitly warns that this server is not actively maintained and that tenzir/skills is superseding it. Tool registrations are represented by the repository snapshot.

  • official release history

    Maintainer releases provide version history for the MCP project.

  • official successor project

    The current README identifies this skills project as the successor for new work.

Documentation checked 2026-10-28T13:41:09.000Z. Connection has not been runtime tested.