castle_get_events_schema
Get the event schema
List the event fields you can filter and group on, with their types. Read this first — the other query tools need real field names. Castle: GET /v1/events/schema.
无需输入参数。
io.usefulapi由 usefulapi.io 发布官方发布者v1.39.2更新于 Nov 14, 2026
Investigate security events and manage the allow/deny lists an analyst acts on.
发布方自己的服务:Ably MCP by usefulapi
托管的 Castle 服务器,让助手调查安全事件并管理分析师所用的允许/拒绝名单。
Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。
把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。
阅读 https://sourceweft.com/mcp/io.usefulapi%2Fcastle/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。把它添加到你客户端的 mcpServers 配置中。
{
"mcpServers": {
"castle-by-usefulapi": {
"type": "http",
"url": "https://castle.usefulapi.io/mcp"
}
}
}Investigate security events and manage the allow/deny lists an analyst acts on. Hosted, no local install.
Live endpoint: https://castle.usefulapi.io/mcp · Homepage: https://usefulapi.io
https://castle.usefulapi.io/mcp.claude mcp add --transport http castle https://castle.usefulapi.io/mcp, then run /mcp to log in.Add only the URL. Do not add an Authorization header or an API key to the client config: the server signs you in with OAuth, and the login page asks for your Castle credentials.
Step-by-step setup, where to find your credentials, and FAQ: https://usefulapi.io/castle/
On first connect you'll paste your Castle credentials. They are validated, stored per-user, and scoped to you — no keys in config files.
read tools are read-only; write tools mutate data (clients should confirm them); meta tools report usage, manage your subscription or send a feature request.
Each paid plan covers this server only. Ask your AI to run castle_upgrade and choose Pro or Pro+, billed monthly or yearly (it returns a Stripe Checkout link). If you already have Pro, ask to change it to Pro+. The change requires your confirmation, keeps your billing interval and charges the price difference for the rest of the period immediately. Cancel any time with castle_cancel_subscription: your paid plan continues to the end of the paid period, with no refund for the current period, and asking to resume the same plan with castle_upgrade before then undoes the cancel. Or write to [email protected].
MIT
来源:servers/castle/README.md,提交 3c1b3df
Get the event schema
List the event fields you can filter and group on, with their types. Read this first — the other query tools need real field names. Castle: GET /v1/events/schema.
无需输入参数。
Search security events
Query the security event stream — logins, registrations, transactions and their risk verdicts. Read-only despite being a POST: Castle takes the query in the body. Castle: POST /v1/events/query.
pagecolumnsfilters必填query_typeresults_sizeGroup security events
Aggregate matching events by one or more fields — the fast way to see which IPs, devices or countries dominate a spike. Read-only despite being a POST. Castle: POST /v1/events/group.
pagefilters必填results_sizegroup_by_fields必填Search lists
Find the allow/deny lists defined in the environment. Read-only despite being a POST. Castle: POST /v1/lists/query.
pagefiltersresults_sizeGet one list
Fetch a single list with its primary and secondary field definitions. Castle: GET /v1/lists/{id}.
list_id必填Search items in a list
Search the entries of one list — the blocked IPs, emails or device ids it holds. Read-only despite being a POST. Castle: POST /v1/lists/{list_id}/items/query.
pagefilterslist_id必填results_sizeCount items in a list
Count the entries in one list, with the same optional filters as the search. Read-only despite being a POST. Castle: POST /v1/lists/{list_id}/items/count.
filterslist_id必填Get one list item
Fetch a single list entry — its value, who added it, the comment and its archive time. Castle: GET /v1/lists/{list_id}/items/{id}.
item_id必填list_id必填Create a list
Create a new allow or deny list. primary_field is the event field its entries match on, e.g. ip or user.email. Castle: POST /v1/lists.
name必填color必填descriptionprimary_field必填secondary_fieldUpdate a list
Rename a list or change its colour or description. Castle: PUT /v1/lists/{id}.
namecolorlist_id必填descriptionAdd an item to a list
Add an entry to a list — for example block an IP or an email. This changes live policy behaviour. Castle: POST /v1/lists/{list_id}/items.
commentlist_id必填author_type必填primary_value必填secondary_valueauto_archives_atauthor_identifier必填Update a list item's comment
Change the comment on a list entry. Castle: PUT /v1/lists/{list_id}/items/{id}.
comment必填item_id必填list_id必填Archive a list item
Archive a list entry so it stops matching. Reversible with castle_unarchive_list_item. Castle: DELETE /v1/lists/{list_id}/items/{id}/archive.
item_id必填list_id必填Unarchive a list item
Restore a previously archived list entry so it matches again. Castle: PUT /v1/lists/{list_id}/items/{id}/unarchive.
item_id必填list_id必填已满足适用检查项的 100%
该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。
io.usefulapi官方发布者
面向 Ably 的托管 MCP 服务器,让助手查看实时频道、在线状态与用量统计、发布消息,并查看应用配置。
io.usefulapi官方发布者
只读访问 ROLLER 场馆数据:搜索预订、查询产品可用性,并查看宾客、免责声明、礼品卡和每日报表。
io.usefulapi官方发布者
托管的 Planerio 连接器,让助手读取排班、人力需求、可用人员、员工资料、缺勤和年假天数。
io.usefulapi官方发布者
只读访问 Marmin 的阿联酋电子发票数据:发票、贷项通知单、UBL XML、Peppol 状态与业务档案。
io.usefulapi官方发布者
面向 Oyster 的远程 MCP 服务器,让助手读取团队、休假、报销、合同与发票数据,并审批或拒绝相关申请。
{ "mcpServers": { "castle": { "url": "https://castle.usefulapi.io/mcp" } }}