# Cortex XSIAM SDK

> Use this tool when you need to develop and automate security content for Cortex XSIAM/XSOAR platforms, and want to streamline your workflow with semantic search and SDK operations. It solves problems such as content discovery, validation, and deployment, and accepts natural language queries as input, producing formatted and validated security content as output. Ideal for security automation developers and teams working with Cortex XSIAM/XSOAR, it provides a comprehensive interface for content management and execution.

Canonical page: https://skillsregistry.net/skills/ciaran-finnegan-cortex-xsiam-sdk  
JSON: https://api.skillsregistry.net/v1/skills/ciaran-finnegan-cortex-xsiam-sdk

## Description

Wraps the Palo Alto Networks Demisto SDK to assist in developing security automation content for Cortex XSIAM/XSOAR platforms. Enables semantic search across 4,700+ playbooks, scripts, integrations, and XQL rules from the official content library using natural language queries. Provides SDK operations for scaffolding, formatting, validating, and linting security content, plus remote operations to list, download, upload content to XSIAM/XSOAR tenants and run commands or playbooks directly.

## Trust

- **Trust score (0–1):** 0.81
- **Verification tier:** verified
- **Last scanned:** 2026-09-28

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** mcp-remote
- **Runtime environment:** api
- **Category:** security
- **Updated:** 2026-09-28

## Source

- **Source listing:** [PulseMCP](https://www.pulsemcp.com/servers/ciaran-finnegan-cortex-xsiam-sdk)
- **Repository:** <https://github.com/ciaran-finnegan/cortex-xsiam-sdk-mcp-tools>

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "ciaran-finnegan-cortex-xsiam-sdk"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/ciaran-finnegan-cortex-xsiam-sdk` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/ciaran-finnegan-cortex-xsiam-sdk/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt