{
  "name": "soar-record-gateway",
  "description": "Edge MCP server for the SOAR AI Agent Playbook API (Lateos). Query the golden SOAR security dataset stored in Neon PostgreSQL: fetch executable playbooks and threat-intelligence records (metered at $0.05 USD per record, post-paid via Stripe), keyword/full-text search over record content (flat $0.01 USD per search), and retrieve the total record count (free).",
  "publisher": "Lateos",
  "homepage": "https://lateos.ai",
  "license": "https://lateos.ai/licensing/",
  "mcp": {
    "endpoint": "https://soar-api.nevada-f99.workers.dev/mcp",
    "transport": "streamable-http",
    "protocol_version": "2025-06-18",
    "auth": {
      "type": "bearer",
      "header": "Authorization",
      "value_format": "Bearer soar_live_<key>",
      "description": "Every MCP request is authenticated with an API key. Missing or invalid keys return HTTP 401 (never a payment page on MCP). Obtain a key by completing the Stripe checkout flow at /v1/records/fetch (HTTP 402 challenge) or by contacting partnerships@lateos.ai."
    }
  },
  "tools": [
    {
      "name": "fetch_security_records",
      "description": "Fetch executable SOAR playbooks and threat-intelligence records from the golden security dataset, filtered by platform, executability, and safety flags. Metered at $0.05 USD per record returned (post-paid via Stripe billing meter). Request only the records you need.",
      "inputSchema": {
        "type": "object",
        "properties": {
          "platform": {
            "type": "string",
            "description": "SIEM/SOAR platform filter: sentinel, splunk_soar, xsoar, google_secops, knowledge_qa."
          },
          "is_executable": {
            "type": "boolean",
            "description": "Only records containing runnable automation."
          },
          "has_destructive_step": {
            "type": "boolean",
            "description": "Only records containing state-modifying or destructive steps."
          },
          "requires_human_approval": {
            "type": "boolean",
            "description": "Only records flagged as requiring human approval before execution."
          },
          "limit": {
            "type": "integer",
            "minimum": 1,
            "maximum": 100,
            "default": 10,
            "description": "Maximum number of records to return (1-100, default 10)."
          }
        },
        "additionalProperties": false
      }
    },
    {
      "name": "get_total_record_count",
      "description": "Returns the total number of records currently in the SOAR security database (the golden dataset). Free, unmetered metadata call - no records are returned or billed.",
      "inputSchema": {
        "type": "object",
        "properties": {},
        "additionalProperties": false
      }
    },
    {
      "name": "search_security_records",
      "description": "Keyword/full-text search across the golden SOAR security dataset (payload content, ranked by relevance). Flat price: $0.01 USD per search call regardless of matches returned (billed via Stripe meter). Use instead of fetch_security_records when you need to find records by content rather than sample the corpus.",
      "inputSchema": {
        "type": "object",
        "properties": {
          "q": {
            "type": "string",
            "minLength": 1,
            "maxLength": 200,
            "description": "Search term (1-200 chars) matched against record payload content."
          },
          "platform": {
            "type": "string",
            "description": "SIEM/SOAR platform filter: sentinel, splunk_soar, xsoar, google_secops, knowledge_qa."
          },
          "is_executable": {
            "type": "boolean",
            "description": "Only records containing runnable automation."
          },
          "has_destructive_step": {
            "type": "boolean",
            "description": "Only records containing state-modifying or destructive steps."
          },
          "requires_human_approval": {
            "type": "boolean",
            "description": "Only records flagged as requiring human approval before execution."
          },
          "limit": {
            "type": "integer",
            "minimum": 1,
            "maximum": 50,
            "default": 10,
            "description": "Maximum number of matching records to return (1-50, default 10)."
          }
        },
        "required": ["q"],
        "additionalProperties": false
      }
    }
  ]
}