MISP MCP Server

Name: MISP MCP Server
Author: sairambokka

@sairambokka

リポジトリ

MISP MCP Server について

An MCP server for the open source MISP project

#misp #mcp #server #malware #information-sharing

基本情報

カテゴリ

その他

ランタイム

python

トランスポート

stdio

公開者

sairambokka

設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "misp-mcp-server": {
      "command": "python",
      "args": [
        "misp_mcp_server.py"
      ]
    }
  }
}

ツール

ツールは検出されませんでした

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is MISP MCP Server?

MISP MCP Server is a Model Context Protocol (MCP) server that exposes MISP (Malware Information Sharing Platform) IOC retrieval functions to MCP-compatible clients like Claude Desktop. It allows users to fetch recent indicators of compromise, get summary statistics, filter by type, export to JSON, and verify MISP connectivity.

How to use MISP MCP Server?

Install Python dependencies, set the MISP_URL and MISP_API_KEY environment variables, and run python misp_mcp_server.py. Then configure an MCP client (e.g., Claude Desktop) with the command python and the absolute path to the script, along with the environment variables. The server listens via STDIO and exposes five tools and one resource.

Key features of MISP MCP Server

Retrieve IOCs added to MISP in the last 24 hours.
Get summary statistics and counts by IOC type.
Filter IOCs by specific types (IP, domain, URL, etc.).
Export IOCs to JSON files.
Verify MISP connection and configuration.

Use cases of MISP MCP Server

Security analysts querying recent threat indicators from MISP via Claude Desktop.
Automated IOC retrieval for integration into security workflows.
Quickly checking MISP configuration and connectivity.
Generating daily IOC reports filtered by type.
Saving IOCs to structured files for further analysis.

FAQ from MISP MCP Server

What are the prerequisites for running MISP MCP Server?

Python 3.8+, access to a MISP instance, and a MISP API key with read access to attributes and events.

How do I connect MISP MCP Server to Claude Desktop?

Add a configuration entry in Claude's claude_desktop_config.json with the command python, the absolute path to the script, and the MISP_URL and MISP_API_KEY environment variables.

What tools does MISP MCP Server provide?

It provides five tools: get_recent_iocs(), get_ioc_summary(), get_iocs_by_type(), save_iocs_to_file(), and check_misp_connection().

Why am I getting a "Failed to connect to MISP" error?

Check that your MISP_URL is correct, the MISP instance is accessible from your network, and there are no SSL certificate issues (the script uses ssl=False for local instances).