update_alert_assignee

MCP tool from MCP Panther by panther-labs

Update the assignee of one or more alerts

How to use it

update_alert_assignee is exposed by the MCP Panther MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the update_alert_assignee tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.

FULL MCP PANTHER LISTING

Other tools in MCP Panther (35)

add_alert_comment

Add a comment to a Panther alert

bulk_update_alerts

Bulk update multiple alerts with status, assignee, and/or comment changes

disable_detection

Disable a detection by setting enabled to false. Supports rules, scheduledrules, simplerules, and policies

get_ai_alert_triage_summary

Retrieve the latest AI triage summary previously generated for a specific alert

get_alert

Get detailed information about a specific alert

get_alert_event_stats

Analyze patterns and relationships across multiple alerts by aggregating their event data into time-based statistics

get_alert_events

Get a small sampling of events for a given alert

get_bytes_processed_metrics

Get data ingestion metrics by log type and source

get_data_model

Get detailed information about a specific data model

get_detection

Get detailed information about a specific detection including the detection body and tests. Accepts a list with one detection type: ["rules"], ["scheduledrules"], ["simplerules"], or ["policies"]

get_global_helper

Get detailed information and complete Python code for a specific global helper

get_http_log_source

Get detailed information about a specific HTTP log source by ID

get_log_type_schema_details

Get detailed information for specific log type schemas

get_permissions

Get the current user's permissions

get_role

Get detailed information about a specific role including permissions

get_rule_alert_metrics

Get metrics about alerts grouped by rule

get_scheduled_query

Get detailed information about a specific scheduled query by ID

get_severity_alert_metrics

Get metrics about alerts grouped by severity

get_table_schema

Get schema information for a specific table

get_user

Get detailed information about a specific user

list_alert_comments

List all comments for a specific alert

list_alerts

List alerts with comprehensive filtering options (date range, severity, status, etc.)

list_data_models

List data models that control UDM mappings in rules

list_database_tables

List all available tables for a specific database in Panther's data lake

list_databases

List all available data lake databases in Panther

list_detections

List detections from Panther with comprehensive filtering support. Supports multiple detection types and filtering by name, state, severity, tags, log types, resource types, output IDs (destinations), and more. Returns outputIDs for each detection showing configured alert destinations

list_global_helpers

List global helper functions with comprehensive filtering options (name search, creator, modifier)

list_log_sources

List log sources with optional filters (health status, log types, integration type)

list_log_type_schemas

List available log type schemas with optional filters

list_roles

List all roles with filtering options (name search, role IDs, sort direction)

list_scheduled_queries

List all scheduled queries with pagination support

list_users

List all Panther user accounts with pagination support

query_data_lake

Execute SQL queries against Panther's data lake with synchronous results

start_ai_alert_triage

Start an AI-powered triage analysis for a Panther alert with intelligent insights and recommendations

update_alert_status

Update the status of one or more alerts