How can power users specify exact execution paths and servers?
How can power users specify exact execution paths and servers?
For analysts or engineers who demand full control, MCP supports explicit tool routing and parameter-level configuration. Power user example: “Use SOCRadar’s MCP Server for threat actor correlation, and cross-check IPs with VirusTotal. Limit to actors active in the last 7 days.” { “task”: “custom_threat_correlation”, “steps”: [ { “action”: “query_threat_actor”, “server”: “mcp-socradar-intel”, “filters”: { “region”: “Brazil”, “sector”: “Finance”, “date_range”: “last_7_days” } }, { “action”: “check_ioc_reputation”, “server”: “mcp-virustotal”, “ioc_field”: “related_ips” } ] } In this example:- The execution path is predefined
- Tools are locked to specific servers
- Output can be tuned per step
- No surprises in what runs where
| Mode | Target User | Strengths |
| Low-Code | SOC Analyst, CISOs | Simplicity, speed, no setup |
| Power User | Threat hunters, engineers | Transparency, precision, flexibility |
Intelligence in your inbox every Thursday.
Join 30,000+ security professionals reading SOCRadar research.
Subscribe