Set up rsigma in Windsurf

communitystdiounknown

A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MCP and LSP servers :crab:

01Configuration

{
  "mcpServers": {
    "rsigma": {
      "command": "docker",
      "args": [
        "run",
        "ghcr.io/timescale/rsigma:latest"
      ]
    }
  }
}

Add this to ~/.codeium/windsurf/mcp_config.json. Generated from the captured install method (docker); the mcpServers shape is shared across Claude Desktop, Cursor, Windsurf, Cline, and VS Code.

02Steps

Make sure Windsurf is installed and up to date.
Open ~/.codeium/windsurf/mcp_config.json and add the block above (merge into any existing mcpServers).
Provide any required API keys/credentials as environment variables.
Restart Windsurf and confirm rsigma’s tools appear.

03Other runtimes

Claude Desktop Cursor Cline Continue Goose VS Code OpenAI Agents SDK LangGraph CrewAI

04Provenance

config_sourcegenerated from captured install method

last_checked2026-07-16 08:10Z

sourcesGitHub repo search [p4]

Next step

Want agents that act within guardrails? Apex is the live governed-agent product — paced, capped, and fully-logged actions with approvals before anything runs.

Explore Apex →

See also: server page · is it safe? · alternatives