Castle MCP by usefulapi

io.usefulapi由 usefulapi.io 发布官方发布者v1.39.2更新于 Nov 14, 2026

Investigate security events and manage the allow/deny lists an analyst acts on.

发布方自己的服务:Ably MCP by usefulapi

已验证Streamable HTTP可网页运行安全与监控数据与分析

概览

AI 生成的概览

托管的 Castle 服务器,让助手调查安全事件并管理分析师所用的允许/拒绝名单。

可以做什么
  • 查看事件字段结构,了解可筛选和可分组的字段
  • 按 IP、设备或国家搜索并分组登录、注册、交易等安全事件
  • 搜索、读取并统计允许/拒绝名单及其条目
  • 创建和重命名名单,添加条目、修改备注、归档或恢复条目
  • 查看当月用量、提交功能请求,以及升级或取消付费方案
适用场景
适合分析师用自然语言查询 Castle 安全事件、找出某次异常高峰中占主导的 IP、设备或国家,或在不离开对话的情况下维护被封禁的 IP、邮箱或设备名单。
运行要求
通过 streamable HTTP 连接的远程 MCP 端点,无需本地安装。只需填写 URL,通过 OAuth 登录,首次连接时输入 Castle 凭据,凭据按用户存储。客户端配置中不要添加 API 密钥或 Authorization 头。
安装前请注意
写入类工具会改变线上策略:添加名单条目可能封禁某个 IP 或邮箱,归档条目会使其不再匹配,执行创建、更新、归档或恢复前应先确认。付费方案会产生费用(Pro 与 Pro+ 按月或按年,通过结账链接付款),升级会立即收取差价,取消当期不退款。免费额度为每月 50 次工具调用。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Castle MCP by usefulapi,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.usefulapi%2Fcastle/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "castle-by-usefulapi": {
      "type": "http",
      "url": "https://castle.usefulapi.io/mcp"
    }
  }
}

README

Castle MCP by usefulapi

Investigate security events and manage the allow/deny lists an analyst acts on. Hosted, no local install.

Live endpoint: https://castle.usefulapi.io/mcp · Homepage: https://usefulapi.io

Connect

  • Claude (claude.ai, Desktop): open Customize → Connectors, click + Add → Add custom connector, and paste https://castle.usefulapi.io/mcp.
  • Claude Code: claude mcp add --transport http castle https://castle.usefulapi.io/mcp, then run /mcp to log in.
  • VS Code: Add to VS Code.
  • Cursor and other clients: add the URL as a remote MCP server:
json
{  "mcpServers": {    "castle": {      "url": "https://castle.usefulapi.io/mcp"    }  }}

Add only the URL. Do not add an Authorization header or an API key to the client config: the server signs you in with OAuth, and the login page asks for your Castle credentials.

Step-by-step setup, where to find your credentials, and FAQ: https://usefulapi.io/castle/

On first connect you'll paste your Castle credentials. They are validated, stored per-user, and scoped to you — no keys in config files.

Tools

ToolTypeWhat it does
castle_get_events_schemareadGet the event schema
castle_search_eventsreadSearch security events
castle_group_eventsreadGroup security events
castle_search_listsreadSearch lists
castle_get_listreadGet one list
castle_search_list_itemsreadSearch items in a list
castle_count_list_itemsreadCount items in a list
castle_get_list_itemreadGet one list item
castle_create_listwriteCreate a list
castle_update_listwriteUpdate a list
castle_create_list_itemwriteAdd an item to a list
castle_update_list_itemwriteUpdate a list item's comment
castle_archive_list_itemwriteArchive a list item
castle_unarchive_list_itemwriteUnarchive a list item
castle_usage_statusmetaUsage status (free-tier meter)
castle_request_featuremetaRequest a missing feature
castle_upgrademetaUpgrade to Pro or Pro+
castle_cancel_subscriptionmetaCancel the Pro subscription

read tools are read-only; write tools mutate data (clients should confirm them); meta tools report usage, manage your subscription or send a feature request.

Pricing

PlanPriceLimit
Free$050 tool calls / month
Pro$9/mo or $90/yr (2 months free)10,000 tool calls / month
Pro+$39/mo or $390/yr (2 months free)100,000 tool calls / month

Each paid plan covers this server only. Ask your AI to run castle_upgrade and choose Pro or Pro+, billed monthly or yearly (it returns a Stripe Checkout link). If you already have Pro, ask to change it to Pro+. The change requires your confirmation, keeps your billing interval and charges the price difference for the rest of the period immediately. Cancel any time with castle_cancel_subscription: your paid plan continues to the end of the paid period, with no refund for the current period, and asking to resume the same plan with castle_upgrade before then undoes the cancel. Or write to [email protected].

License

MIT

来源:servers/castle/README.md,提交 3c1b3df

工具

14

castle_get_events_schema

Get the event schema

List the event fields you can filter and group on, with their types. Read this first — the other query tools need real field names. Castle: GET /v1/events/schema.

无需输入参数。

castle_search_events

Search security events

Query the security event stream — logins, registrations, transactions and their risk verdicts. Read-only despite being a POST: Castle takes the query in the body. Castle: POST /v1/events/query.

输入参数pagecolumnsfilters必填query_typeresults_size

castle_group_events

Group security events

Aggregate matching events by one or more fields — the fast way to see which IPs, devices or countries dominate a spike. Read-only despite being a POST. Castle: POST /v1/events/group.

输入参数pagefilters必填results_sizegroup_by_fields必填

castle_search_lists

Search lists

Find the allow/deny lists defined in the environment. Read-only despite being a POST. Castle: POST /v1/lists/query.

输入参数pagefiltersresults_size

castle_get_list

Get one list

Fetch a single list with its primary and secondary field definitions. Castle: GET /v1/lists/{id}.

输入参数list_id必填

castle_search_list_items

Search items in a list

Search the entries of one list — the blocked IPs, emails or device ids it holds. Read-only despite being a POST. Castle: POST /v1/lists/{list_id}/items/query.

输入参数pagefilterslist_id必填results_size

castle_count_list_items

Count items in a list

Count the entries in one list, with the same optional filters as the search. Read-only despite being a POST. Castle: POST /v1/lists/{list_id}/items/count.

输入参数filterslist_id必填

castle_get_list_item

Get one list item

Fetch a single list entry — its value, who added it, the comment and its archive time. Castle: GET /v1/lists/{list_id}/items/{id}.

输入参数item_id必填list_id必填

castle_create_list

Create a list

Create a new allow or deny list. primary_field is the event field its entries match on, e.g. ip or user.email. Castle: POST /v1/lists.

输入参数name必填color必填descriptionprimary_field必填secondary_field

castle_update_list

Update a list

Rename a list or change its colour or description. Castle: PUT /v1/lists/{id}.

输入参数namecolorlist_id必填description

castle_create_list_item

Add an item to a list

Add an entry to a list — for example block an IP or an email. This changes live policy behaviour. Castle: POST /v1/lists/{list_id}/items.

输入参数commentlist_id必填author_type必填primary_value必填secondary_valueauto_archives_atauthor_identifier必填

castle_update_list_item

Update a list item's comment

Change the comment on a list entry. Castle: PUT /v1/lists/{list_id}/items/{id}.

输入参数comment必填item_id必填list_id必填

castle_archive_list_item

Archive a list item

Archive a list entry so it stops matching. Reversible with castle_unarchive_list_item. Castle: DELETE /v1/lists/{list_id}/items/{id}/archive.

输入参数item_id必填list_id必填

castle_unarchive_list_item

Unarchive a list item

Restore a previously archived list entry so it matches again. Castle: PUT /v1/lists/{list_id}/items/{id}/unarchive.

输入参数item_id必填list_id必填

版本历史

26
  1. v1.39.2最新Nov 14, 2026
  2. v1.39.1Nov 13, 2026
  3. v1.38.0Nov 12, 2026
  4. v1.37.3Nov 11, 2026
  5. v1.36.5Nov 8, 2026
  6. v1.36.4Nov 7, 2026
  7. v1.35.3Nov 5, 2026
  8. v1.35.2Nov 5, 2026
  9. v1.35.1Nov 4, 2026
  10. v1.35.0Nov 3, 2026
  11. v1.34.1Nov 3, 2026
  12. v1.33.0Nov 1, 2026
  13. v1.31.0Oct 31, 2026
  14. v1.30.0Oct 31, 2026
  15. v1.29.2Oct 30, 2026
  16. v1.29.0Oct 30, 2026
  17. v1.24.0Oct 26, 2026
  18. v1.21.3Oct 25, 2026
  19. v1.21.0Oct 25, 2026
  20. v1.20.0Oct 24, 2026
  21. v1.17.0Oct 23, 2026
  22. v1.16.4Oct 22, 2026
  23. v1.16.3Oct 21, 2026
  24. v1.11.1Oct 9, 2026
  25. v1.10.0Oct 9, 2026
  26. v1.0.0Sep 29, 2026

评分

已满足适用检查项的 100%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分

其他 Usefulapi 集成