io.github.labaccessnow/secops-field-notes-mcp
SecOps Field Notes
Is the SecOps Field Notes MCP server down? No. It answered initialize and tools/list in the probe of 2026-11-08.
CVSS scoring, IOC extraction, email header triage, hash/JWT/timestamp decoding, CISA KEV lookup.
alive probed 2026-11-14 · unchanged since 2026-11-08
- Run it
- docker run -i --rm ghcr.io/labaccessnow/secops-field-notes-mcp:0.1.0 (stdio, probed in a container with the network off)
- Host
- ghcr.io
- Reports itself as
- secops-field-notes 0.1.0
- Capabilities
- tools
- Instructions
- none
- Of a 1M window
- 0.2 % of a 1M context window
- Count
- 1.9k tokens in Claude Opus 5.5, exact, measured 2026-10-27. With the Claude Code prefix mcp__…__ on each tool name: 2.0k. The o200k_base estimate is 1.1k. Counted again when the tool definitions change. Method.
- Repository
- https://github.com/labaccessnow/secops-field-notes-mcp
- Website
- https://secopsfieldnotes.com/
- Registry
- deprecated, updated 2026-11-07 · registry entry
Most expensive tools
The Claude column scales the o200k estimate of each tool by this server's ratio of exact to estimate, 1.70×.
| Tool | ≈ Claude tokens | o200k estimate | Share of this server |
|---|---|---|---|
| cvss_score | 270 | 159 | 15 % |
| extract_iocs | 243 | 143 | 13 % |
| decode_layers | 239 | 141 | 13 % |
| lookup_kev | 195 | 115 | 11 % |
| analyze_email_headers | 192 | 113 | 10 % |
Compare this server with others, or with the servers that share its tool set.
Same tool set as 1 other server
These registry entries have the same tool names and the same schema sizes.
More servers
Other registry entries on ghcr.io, the ones next to this name; all of them.
- io.github.l33tdawg/sage · timeout
- AIOps Field Notes io.github.labaccessnow/aiops-field-notes-mcp · alive
- whatismynetip io.github.labaccessnow/netip-mcp · alive
- NetOps Field Notes io.github.labaccessnow/netops-field-notes-mcp · alive
- Deadzone io.github.laradji/deadzone · alive
- io.github.lazogio/rabbit-mcp · crashed on start
- quota-mcp io.github.limitcool/quota-mcp · crashed on start
- gha-doctor io.github.linnea-bakshi/gha-doctor · alive
Servers that mention secops.
- io.github.NeetPatel/devops-mcp · needs mcp<2
- ServiceNow MCP Server io.github.habenani/servicenow-mcp · crashed on start
- ServiceNow MCP Server io.github.aartiq/servicenow-mcp · crashed on start
- SecOps Field Notes io.github.getlarkwright/secops-field-notes-mcp · alive
Badge for the README
The result of the latest probe, the tool count and the token cost. The feed has an entry for every probe that changed them.
A mail when this server changes
Stops answering, comes back, tool set or cost changes. One confirmation mail first, a stop link in every mail.
For the publisher
- The server answers initialize and tools/list. Nothing to fix.