MCP AI SOC Sher

This is a helper that lets your AI turn plain English questions about security into database queries. It is made for people who watch over computer systems and want to check logs or look for suspicious activity without writing SQL themselves. If you work in a security team or just want to keep an eye on your systems, this is for you.

What this MCP server does

You type a question like 'find all suspicious login attempts in the last 24 hours'. The AI sends that to this helper. The helper turns your words into a proper database query, checks it for safety, runs it, and sends the results back. You get the query it wrote and the rows it found, all in the chat.

Click to zoom

What you can do with it

• Turn plain English questions into database queries
• Check queries for security risks before running them
• Connect to SQLite or Snowflake databases
• Monitor access to sensitive tables
• Detect possible SQL injection attempts
• Stream results back as they are found

Try asking your AI

• “Find all suspicious login attempts in the last 24 hours”
• “Show me users who accessed the payroll table yesterday”
• “List failed logins from outside the office network this week”
• “Which accounts have not logged in for 90 days”

What it gives back to you

You get back the SQL query it wrote and the rows it found from the database. If you asked for a summary, it can show that too. The results appear in the chat as a list or table. It also tells you if it found any security concerns in the query.

Before you start

Who it's for

Security analysts, IT staff, and anyone who needs to check database logs or find suspicious activity without writing SQL.