広告掲載
MCP.so
ログイン

MISP MCP Server

@sairambokka

リポジトリ

基本情報

カテゴリ

その他

トランスポート

stdio

作者

sairambokka

MISP MCP Server について

An MCP server for the open source MISP project

#misp#mcp#server#malware#information-sharing

MISP MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "misp-mcp-server": {
      "command": "python",
      "args": [
        "misp_mcp_server.py"
      ]
    }
  }
}

MISP MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is MISP MCP Server?

MISP MCP Server is a Model Context Protocol (MCP) server that exposes MISP (Malware Information Sharing Platform) IOC retrieval functions to MCP-compatible clients like Claude Desktop. It allows users to fetch recent indicators of compromise, get summary statistics, filter by type, export to JSON, and verify MISP connectivity.

How to use MISP MCP Server?

Install Python dependencies, set the MISP_URL and MISP_API_KEY environment variables, and run python misp_mcp_server.py. Then configure an MCP client (e.g., Claude Desktop) with the command python and the absolute path to the script, along with the environment variables. The server listens via STDIO and exposes five tools and one resource.

Key features of MISP MCP Server

  • Retrieve IOCs added to MISP in the last 24 hours.
  • Get summary statistics and counts by IOC type.
  • Filter IOCs by specific types (IP, domain, URL, etc.).
  • Export IOCs to JSON files.
  • Verify MISP connection and configuration.

Use cases of MISP MCP Server

  • Security analysts querying recent threat indicators from MISP via Claude Desktop.
  • Automated IOC retrieval for integration into security workflows.
  • Quickly checking MISP configuration and connectivity.
  • Generating daily IOC reports filtered by type.
  • Saving IOCs to structured files for further analysis.

よくある質問

1

What are the prerequisites for running MISP MCP Server?

Python 3.8+, access to a MISP instance, and a MISP API key with read access to attributes and events.

2

How do I connect MISP MCP Server to Claude Desktop?

Add a configuration entry in Claude's `claude_desktop_config.json` with the command `python`, the absolute path to the script, and the `MISP_URL` and `MISP_API_KEY` environment variables.

3

What tools does MISP MCP Server provide?

It provides five tools: `get_recent_iocs()`, `get_ioc_summary()`, `get_iocs_by_type()`, `save_iocs_to_file()`, and `check_misp_connection()`.

4

Why am I getting a "Failed to connect to MISP" error?

Check that your `MISP_URL` is correct, the MISP instance is accessible from your network, and there are no SSL certificate issues (the script uses `ssl=False` for local instances).

5

Why are no IOCs returned?

This is normal if no IOCs were added to MISP in the last 24 hours.

コメント

「その他」の他のコンテンツ

Volley.sh

Volley

A good sequence diagram can solve almost any communication problem in engineering. Volley lets your agent write them as plain text, with the real request and response payloads on every arrow. It checks its own syntax wi

Activepieces

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

23.2K

The Living Bread

The Living Bread

A free remote MCP server for The Living Bread. Bible passages read word for word from a stored public domain text with an evidence label, keyword search and cross references, real churches, gatherings and prayer groups w

Senso MCP for Joomla

sensomedia

Senso MCP turns a Joomla 5 or 6 site into a remote MCP server. It runs inside Joomla itself (no extra server, no Node.js bridge) and is secured with OAuth 2.1 and Joomla's own ACL. The free pack lets an AI assistant crea

FastMCP v2 🚀

jlowin

🚀 The fast, Pythonic way to build MCP servers and clients.

26.0K
広告掲載