MCP.so
ログイン

Enrichment MCP Server

@MSAdministrator

基本情報

カテゴリ

その他

トランスポート

stdio

作者

MSAdministrator

Enrichment MCP Server について

A Model Context Protocol server for enriching data from multiple security products

Enrichment MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "enrichment-mcp": {
      "command": "uv",
      "args": [
        "run",
        "--env-file",
        ".env",
        "server.py"
      ]
    }
  }
}

Enrichment MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Enrichment MCP Server?

Enrichment MCP Server is a Model Context Protocol (MCP) server that performs third-party enrichment on a provided observable. It uses the security-cli Python package and configured services (such as VirusTotal, HybridAnalysis, and Shodan) to determine which enrichment services to call based on the observable type.

How to use Enrichment MCP Server?

Run locally with uv run --env-file .env server.py after creating a .env file with the required API keys. For use with Claude Desktop, add the server to your claude_desktop_config.json file under mcpServers, pointing command to the uv binary and passing the directory and server.py as arguments.

Key features of Enrichment MCP Server

  • Exposes a single lookup-observable tool that routes observables to the correct enrichment service
  • Supports VirusTotal, HybridAnalysis, AlienVault, Shodan, Urlscan.io, AbuseIPDB, and HaveIBeenPwned
  • Handles IP addresses, domains, URLs, and email addresses
  • Uses environmental variables for API key configuration
  • Customizable prompt templates via Jinja2 files in the templates directory
  • All enrichment services require API keys

Use cases of Enrichment MCP Server

  • Enrich an IP address with VirusTotal and Shodan from an MCP client
  • Look up a domain reputation using AlienVault and HybridAnalysis
  • Check if an email address appears in known data breaches via HaveIBeenPwned
  • Automate observable analysis within Claude Desktop using the exposed MCP tool

よくある質問

1

What services are supported?

VirusTotal, HybridAnalysis, AlienVault, Shodan, Urlscan.io, AbuseIPDB, and HaveIBeenPwned. All require API keys.

2

How do I configure API keys?

Set environmental variables in the format `ENRICHMENT_MCP_VIRUSTOTAL_KEY`, `ENRICHMENT_MCP_HYBRIDANALYSIS_KEY`, etc., and load them via a `.env` file when starting the server.

3

What observable types are supported?

Currently supported types: `ipaddress`, `domain`, `url`, and `email`. File hashes (md5, sha1, sha256) are defined but not yet implemented.

4

Where does enrichment data come from?

Data is fetched live from each configured third-party service. No local storage of results is implemented.

5

How do I run the server with Claude Desktop?

Add an entry to `claude_desktop_config.json` under `mcpServers` with the command pointing to `uv`, the directory path to the cloned repository, and the argument `run server.py`.

コメント

「その他」の他のコンテンツ