Tracecat FAQs

Question 1

Does it support different authentication methods?

Accepted Answer

Currently, Tracecat MCP handles Tracecat's session cookie-based authentication transparently, logging in only on the first tool call. The Tracecat team is actively working on API token authentication, which will be supported as it becomes available.

Question 2

What aspects of Tracecat can be managed through natural language?

Accepted Answer

AI assistants can manage a wide range of Tracecat operations, including listing, creating, updating, and deleting workflows, actions, cases, and secrets. They can also run workflow executions, manage tables, columns, rows, schedules, and even search Tracecat documentation.

Question 3

What is Tracecat MCP and what does it do?

Accepted Answer

Tracecat MCP is a Model Context Protocol (MCP) server that empowers AI assistants, such as Claude, to control your Tracecat SOAR platform using natural language. It allows AI to manage workflows, actions, cases, secrets, and more.

Question 4

What are the key benefits of integrating Tracecat with AI assistants?

Accepted Answer

Integrating Tracecat with AI assistants via MCP streamlines security operations by enabling natural language control over SOAR tasks. It features lazy authentication, automatic workspace ID detection, and transparent session cookie handling, making AI-driven automation efficient and secure.

Question 5

How many tools does Tracecat MCP offer for automation?

Accepted Answer

It provides 49 comprehensive tools across 12 domains, giving AI assistants full control over the Tracecat API. This includes operations for workflows, actions, executions, cases, secrets, tables, schedules, and more.

Tracecat

Tracecat

Key Features

Use Cases

Key Features

Use Cases