New MCP Server Capabilities

Quick update to our server at mcp.limacharlie.io.

  • New tools:
    • generate_dr_rule_detection
    • generate_dr_rule_respond
    • generate_lcql_query
  • In all the above, the generation has also been updated to take into account the Organization’s own data.

More on the enhanced generation, the new process:

  1. AI determines the platform that the query/rule relates to based on existing platforms in LC.
  2. Based on 1, we fetch all the event_type that the Organization has seen, and another AI matches which event types are relevant to the request.
  3. Based on 2, we fetch all the schemas of the event types as seen by the Organization.
  4. We feed the data from 1-2-3 into the bigger AI along with the query and the relevant LC knowledge.
  5. We take the generated query/rule and feed it to Replay in LC to validate the structure of the query/rule.
  6. If 5 returns an error, we feed back the error at step 4 and repeat up to 5 times to get a valid, relevant rule.

The web app AI features do not yet implement this new generation process but we’re working on it.