Elastic Security
www.elastic.coDetect, investigate, and respond to threats with an all-in-one solution that unifies SIEM, XDR, and cloud security, all powered by AI.
What your agent can do
Add a user comment to an Elastic Security case via POST /api/cases/{caseId}/comments. Use this to log investigation notes or updates on a case without changing its status or fields — use Create or Update Case for that. Run Find Cases first to obtain a valid case ID. Example: calling with caseId… Full schema: https://pipedream.com/apps/elastic-security/actions/add-case-comment.md
Via MCP.
Tasks depend on the interface and permissions.
Connection methods
Choose a route that fits your agent.
MCP
For compatible agent apps
an access token
View setup for MCPAPI
For custom integrations
an access token
View paths for APIMCP connection
MCP server URL
https://remote.mcp.pipedream.net/v3- Authentication
- Provide the Pipedream Connect access token and the documented project, environment, external-user and app-slug headers; provider account connection may be required.
POST https://remote.mcp.pipedream.net/v3
API connection
API path
https://api.pipedream.com/v1/connect/{project_id}/proxy/aHR0cHM6Ly9hcGkuZXhhbXBsZS5jb20vdjEvbWU?external_user_id={external_user_id}&account_id=apn_xxxxxxx- Authentication
- Send a Pipedream Connect access token; Pipedream forwards the connected account credentials to the upstream provider.
View sources and checks
- MCP · Use the Pipedream MCP tool Add Case Comment (Write) for Elastic Security: Add a user comment to an Elastic Security case via POST /api/cases/{caseId}/comments. Use this to log investigation notes or updates on a case without changing its status or fields — use Create or Update Case for that. Run Find Cases first to obtain a valid case ID. Example: calling with caseId… Full schema: https://pipedream.com/apps/elastic-security/actions/add-case-comment.md
- API · Proxy a request to a provider endpoint using a connected account.