Advertise
MCP.so
Sign In

MISP MCP Server

@sairambokka

Repository

Basic information

Category

Other

Transports

stdio

Author

sairambokka

About MISP MCP Server

An MCP server for the open source MISP project

#misp#mcp#server#malware#information-sharing

MISP MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "misp-mcp-server": {
      "command": "python",
      "args": [
        "misp_mcp_server.py"
      ]
    }
  }
}

MISP MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is MISP MCP Server?

MISP MCP Server is a Model Context Protocol (MCP) server that exposes MISP (Malware Information Sharing Platform) IOC retrieval functions to MCP-compatible clients like Claude Desktop. It allows users to fetch recent indicators of compromise, get summary statistics, filter by type, export to JSON, and verify MISP connectivity.

How to use MISP MCP Server?

Install Python dependencies, set the MISP_URL and MISP_API_KEY environment variables, and run python misp_mcp_server.py. Then configure an MCP client (e.g., Claude Desktop) with the command python and the absolute path to the script, along with the environment variables. The server listens via STDIO and exposes five tools and one resource.

Key features of MISP MCP Server

  • Retrieve IOCs added to MISP in the last 24 hours.
  • Get summary statistics and counts by IOC type.
  • Filter IOCs by specific types (IP, domain, URL, etc.).
  • Export IOCs to JSON files.
  • Verify MISP connection and configuration.

Use cases of MISP MCP Server

  • Security analysts querying recent threat indicators from MISP via Claude Desktop.
  • Automated IOC retrieval for integration into security workflows.
  • Quickly checking MISP configuration and connectivity.
  • Generating daily IOC reports filtered by type.
  • Saving IOCs to structured files for further analysis.

Frequently asked questions

1

What are the prerequisites for running MISP MCP Server?

Python 3.8+, access to a MISP instance, and a MISP API key with read access to attributes and events.

2

How do I connect MISP MCP Server to Claude Desktop?

Add a configuration entry in Claude's `claude_desktop_config.json` with the command `python`, the absolute path to the script, and the `MISP_URL` and `MISP_API_KEY` environment variables.

3

What tools does MISP MCP Server provide?

It provides five tools: `get_recent_iocs()`, `get_ioc_summary()`, `get_iocs_by_type()`, `save_iocs_to_file()`, and `check_misp_connection()`.

4

Why am I getting a "Failed to connect to MISP" error?

Check that your `MISP_URL` is correct, the MISP instance is accessible from your network, and there are no SSL certificate issues (the script uses `ssl=False` for local instances).

5

Why are no IOCs returned?

This is normal if no IOCs were added to MISP in the last 24 hours.

Comments

More Other MCP servers

Volley.sh

Volley

A good sequence diagram can solve almost any communication problem in engineering. Volley lets your agent write them as plain text, with the real request and response payloads on every arrow. It checks its own syntax wi

Glasswarp

Glasswarp

See and control a real Windows PC you own — from any MCP client, locally or remotely. Observe (UIA + screenshots), click/type/drag/scroll, launch apps, owner Live View. BYOH: your machine, your key.

Maestro

mobile-dev-inc

Painless E2E Automation for Mobile and Web

14.8K

ICSS

chokcoco

不止于 CSS

20.7K
N

Next Generation Movers: free moving quotes (remote MCP)

Next Generation Movers

Free moving quotes for AI agents from Next Generation Movers, a licensed interstate mover (USDOT 3764697). US long-distance nationwide and local DC/MD/VA. Indicative ballpark price and booking options; optional $0.01 x40

Advertise