From 1c507710b0107f63df0440a0f36f168783115a77 Mon Sep 17 00:00:00 2001
From: Rod Soto <rsoto@splunk.com>
Date: Thu, 5 Feb 2026 21:09:47 -0500
Subject: [PATCH] mcpdata

---
 datasets/mcp/mcp.log             |  3 +++
 datasets/mcp/mcp_server_data.yml | 11 +++++++++++
 2 files changed, 14 insertions(+)
 create mode 100644 datasets/mcp/mcp.log
 create mode 100644 datasets/mcp/mcp_server_data.yml

diff --git a/datasets/mcp/mcp.log b/datasets/mcp/mcp.log
new file mode 100644
index 00000000..cbf6dd8e
--- /dev/null
+++ b/datasets/mcp/mcp.log
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f5cc046db25fb62df985bf2cea6056d2bdaaf0649e4792e592f1fbe2cf9dffd9
+size 637913
diff --git a/datasets/mcp/mcp_server_data.yml b/datasets/mcp/mcp_server_data.yml
new file mode 100644
index 00000000..e68dcd09
--- /dev/null
+++ b/datasets/mcp/mcp_server_data.yml
@@ -0,0 +1,11 @@
+author: Rod Soto, Splunk
+id: 05814111-ec73-49ea-93aa-4563c90b27e5
+date: '2026-02-05'
+description: Logs from MCP server, contain errors, requests, and responses from MCP-enabled AI assistants and agents.
+mitre_technique: []
+environment: attack_range
+datasets:
+- name: mcp_server_data
+  path: /datasets/mcp/mcp.log
+  sourcetype: mcp:jsonrpc
+  source: mcp.log