How to Use the CrowdSec MCP in Mastra AI

Build automated, self-healing security workflows in Mastra AI using this CrowdSec MCP Server.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect CrowdSec MCP to Mastra AI

Create your Vinkius account to connect CrowdSec to Mastra AI and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup CrowdSec with Mastra AI

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Conditional security pipelines with Mastra AI

The `get_cti_smoke` tool queries global threat intelligence to assess the risk profile of any incoming IP address. Your Mastra agents can use this data to trigger specific branches in your backend workflows. If an IP shows high abuse potential, your workflow can automatically trigger secondary verification or block the user. Mastra handles the conditional logic and retries, while this MCP Server provides the raw intelligence.

Automated incident response loops

The `get_decisions` tool retrieves active block decisions from your local CrowdSec instance. Your agent can instantly verify if an IP has been flagged by your firewalls. You can build workflows that automatically update cloud firewalls or notify your team when a local decision is found. The Mastra engine ensures these multi-step operations execute reliably with built-in backoff.

Polling live bans via Mastra AI workflows

The `get_decisions_stream` tool lets your agent poll for changes in banned and unbanned IPs. This keeps your automated security policies synchronized with your actual network state. This MCP Server allows your Mastra workflows to run continuous background checks. If a new ban is detected, the workflow can immediately propagate that block to other cloud resources without manual intervention.

Setup guide

Set up CrowdSec MCP in Mastra AI

Prerequisites

Node.js 18+ and a TypeScript project
@mastra/mcp + @mastra/core packages
Active Vinkius subscription with a valid endpoint token

1

Install dependencies
Run npm install @mastra/mcp @mastra/core plus your preferred model provider (e.g. @ai-sdk/openai).
2

Configure the MCPClient
Create an MCPClient with your Vinkius endpoint as a URL object. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com.
3

Discover and inject tools
Call mcpClient.listTools() and spread the result into your agent's tools object. All CrowdSec tools become native Mastra tools.
4

Run with any model
Swap openai("gpt-4o") for any AI SDK-compatible provider. Call agent.generate() and the agent routes tool calls through MCP automatically.

agent.ts

import { MCPClient } from "@mastra/mcp";
import { Agent } from "@mastra/core/agent";
import { openai } from "@ai-sdk/openai";

const mcpClient = new MCPClient({
  id: "crowdsec-mcp-client",
  servers: {
    "crowdsec-mcp": {
      url: new URL(
        "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
      ),
    },
  },
});

const agent = new Agent({
  name: "CrowdSec Agent",
  model: openai("gpt-4o"),
  instructions: "You have access to CrowdSec tools.",
  tools: {
    ...(await mcpClient.listTools()),
  },
});

const result = await agent.generate(
  "List recent CrowdSec transactions"
);
console.log(result.text);

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by CrowdSec. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect CrowdSec now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about CrowdSec MCP in Mastra AI

Install the package using npm install @mastra/mcp@latest. Instantiate MCPClient with your Vinkius server URL, and spread mcpClient.listTools() into your agent tools configuration.

Yes. Mastra has built-in exponential backoff, so if your local CrowdSec LAPI is temporarily unreachable, the workflow will retry the tool call automatically.

Yes. You can configure requireToolApproval in Mastra to pause the workflow before your agent executes a decision or pulls sensitive threat data.

The integration supports both SSE and Streamable HTTP. Mastra automatically detects the transport type from the Vinkius endpoint, making configuration painless.

Your LAPI credentials and queried IP addresses are processed inside an ephemeral, zero-trust sandbox. The Vinkius platform handles authentication securely, ensuring your sensitive security configuration never leaks to the LLM.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript