Red Sift Radar MCP: one Model Context Protocol server for your entire security stack
Query and act on your DMARC, domains, certificates, and brand protection data from Claude, ChatGPT, Cursor, or any MCP-compatible client.
Query and act on your DMARC, domains, certificates, and brand protection data from Claude, ChatGPT, Cursor, or any MCP-compatible client.
AI has made attacks 95% cheaper to launch, according to Gartner, and your analysts need to match that scale. Red Sift Radar MCPs bring your account data into your AI client of choice.
Ask about a dangling DNS record, a lookalike domain, or a certificate issue, and fix it in the same conversation.
52 capabilities across the entire Red Sift platform, included through one single MCP server.
Dangling DNS Triage used to be an hours, even days-long task depending on your landscape. With the MCP, that task now takes about 5 minutes.
Most security teams use multiple apps to accomplish what Red Sift does on a single platform. Through a single OAuth connection, you get access to your entire account across the product stack.
Read and write, not just lookups
Most MCPs only let an LLM look things up, but the Red Sift Radar MCP can act too. Classify a lookalike, add a domain, activate Dynamic SPF, invite a user, update DMARC tags, or turn a certificate identity on or off, all from a single conversation.
Answers backed by evidence
Every response comes with evidence. That means lookalike screenshots, full Hardenize domain assessments, or certificate issues come with the root cause and guidance attached.
Client-agnostic access
OAuth-based and built to work with whatever AI assistant your team already has open. Claude Desktop, Cursor, VS Code, and more.
Log in, search, cross-reference manually, most of a day
Ask your LLM, get flagged issues in minutes
Switch tools to make the change
Fix it in the same conversation
New seat, new login, training on a tool they rarely use
They query Red Sift directly from the LLM they already use
A support ticket with a different provider for each tool
One provider, one MCP, one place to get help
FAQ
It's an open standard that lets an AI assistant like Claude or ChatGPT connect directly to a piece of software and pull real data from it, or take an action in it, instead of relying on what the model already knows. The Red Sift Radar MCP is our implementation of that standard, built for our own product data.
The Red Sift Radar MCP is OAuth-based, so it uses the same login and permission model as your Red Sift account. There's no separate password and no new account to secure on top of the one you already manage. As with any cross-application integration, it’s wise to double-check user permissions before implementing.
Any LLM client that supports MCP connections.
Both. Security analysts get the most out of it, but you can grant access to other teams, like marketing or compliance, so they can query Red Sift directly instead of asking you for the answer.
Both. The Red Sift Radar MCP supports read and write actions, so your LLM can classify a lookalike, add a domain, update DMARC tags, or turn a certificate identity on, not just report on them.
See how Radar finds and fixes security issues 10x faster across the Pulse platform.
Account-aware AI agents that classify sources and guide remediation inside Red Sift.
Find out how teams like FHC use Radar to investigate threats faster.
Ready to get connected?
See what you can identify and fix all from your LLM with the Red Sift Radar MCP.