Code agentAny MCP client
Scores a suspicious email 0–100 with the header, URL and language evidence — never fetching a single link.
↓ 0★ 0Free
Browse › Cybersecurity › SIEM Alert Narrator
Code agentScanned & human-reviewedAny MCP client
SIEM Alert Narrator
Groups, de-noises and priority-scores your SIEM alerts, then writes the analyst read. GET-only, always.
Before you connect: what this agent would do
A preview derived from this agent’s definition — not a live run. Nothing runs and no key is sent until you connect. FindAgent runs it in an isolated sandbox on the hosted connection.
Credentials it will ask for (3)
- Datadog API Key (credential slot)· optional
Only ever sent to: api.datadoghq.com
- Datadog Application Key (credential slot)· optional
Only ever sent to: api.datadoghq.com
- Generic SIEM API Token (credential slot)· optional
Only ever sent to: api.datadoghq.com
Safety rails that guard it
- Every result is scanned for leaked secrets and prompt-injection before it reaches you — a check no agent can turn off.
Connect over MCP — runs anywhere
SIEM Alert Narrator runs on FindAgent and connects over MCP — no download, no local runtime. Add the server URL to any MCP-capable client.
1 · Choose your client
2 · Add the server URL
remote MCP
https://mcp.findagent.cloud/agents/siem-alert-narratorChatGPT (Plus / Pro): Settings → Connectors → add a remote MCP server, then paste the URL and approve it.
You add this server inside your client and approve it once — that in-client step is a security check, so there's no one-click button for it.
Signing in: the first time you connect, your client opens a FindAgent sign-in page — approve once and you're connected. There's no API key or token to copy; access is tied to your FindAgent account.
What you'll need — and where to get it
You enter these when you connect. They're encrypted, only ever sent to the agent's allowed hosts, and never shared with the creator.
Datadog API Key (credential slot) · optional
GATED. Datadog API key for READ-ONLY security signals access (sent as DD-API-KEY). Leave blank for offline/mock runs. Live verification pending sandbox key.Get this from datadoghq.com's account or API settings.Paste the value as a single line.Only sent to: api.datadoghq.comDatadog Application Key (credential slot) · optional
GATED. Datadog application key paired with the API key (sent as DD-APPLICATION-KEY). Leave blank for offline/mock runs.Get this from datadoghq.com's account or API settings.Paste the value as a single line.Only sent to: api.datadoghq.comGeneric SIEM API Token (credential slot) · optional
GATED. Alternative to Datadog keys: a bearer token for a generic SIEM read API. Leave blank for offline/mock runs.Get this from datadoghq.com's account or API settings.Paste the value as a single line.Only sent to: api.datadoghq.com
Related agents
CompareMore from @kata-team
Code agentAny MCP client
Flags the days your GA4 metrics deviate from their baseline — with the numbers computed, not guessed.
↓ 3★ 0Free
Code agentAny MCP client
Turns YouTube Analytics metrics into a deterministic performance narrative + recommendations
↓ 1★ 1Free
Code agentAny MCP client
Maps your module graph, scores blast radius, plans migrations and composes a validated unified diff.
↓ 1★ 0Free