广告合作
MCP.so
登录

MISP MCP Server

@bornpresident

代码仓库

基本信息

分类

其他

传输方式

stdio

作者

bornpresident

关于 MISP MCP Server

A Model Context Protocol (MCP) server that integrates with the MISP (Malware Information Sharing Platform) to provide threat intelligence capabilities to Large Language Models.

#misp#threat-intelligence#malware

MISP MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "MISP-MCP-SERVER": {
      "command": "python",
      "args": [
        "-m",
        "venv",
        "venv"
      ]
    }
  }
}

MISP MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is MISP MCP Server?

A Model Context Protocol (MCP) server that integrates with the MISP (Malware Information Sharing Platform) to provide threat intelligence capabilities to Large Language Models.

How to use MISP MCP Server?

Set MISP_URL, MISP_API_KEY, and optionally MISP_VERIFY_SSL environment variables, then run as a standalone server (python misp_server.py) or install in Claude Desktop via a JSON configuration. Use provided tools and resources to query and submit data.

Key features of MISP MCP Server

  • Mac malware detection from latest samples
  • Cross‑platform threat intelligence for multiple OSes
  • Advanced search by attribute type, tag, threat actor, TLP
  • IoC submission directly to your MISP instance
  • Threat intelligence report generation
  • MISP instance statistics gathering

Use cases of MISP MCP Server

  • Query latest macOS malware samples for incident response
  • Perform advanced searches on threat actor TLP:RED events
  • Submit indicators of compromise (hashes, URLs, IPs) to MISP
  • Generate comprehensive threat intelligence reports for review
  • Obtain MISP instance statistics for monitoring data volume

常见问题

1

What are the prerequisites to run MISP MCP Server?

Python 3.10 or higher, a MISP instance with API access, and an API key with appropriate permissions.

2

How do I configure the server to connect to my MISP instance?

Set three environment variables: `MISP_URL` (e.g. `https://misp.example.com`), `MISP_API_KEY`, and `MISP_VERIFY_SSL` (True/False).

3

What tools are available to interact with MISP data?

Eight tools: `get_mac_malware`, `get_platform_malware`, `advanced_search`, `submit_ioc`, `generate_threat_report`, `search_misp`, `get_misp_stats`, and a resource `feeds://recent/{days}`.

4

Can I submit new indicators of compromise directly?

Yes, via the `submit_ioc` tool, which accepts an IoC value, type, event description, category, platform, TLP level, and optional comment.

5

What authentication or transport does MISP MCP Server use?

Authentication is handled via an API key set in the `MISP_API_KEY` environment variable; transport is standard HTTPS (SSL verification configurable).

评论

其他 分类下的更多 MCP 服务器

The Living Bread

The Living Bread

A free remote MCP server for The Living Bread. Bible passages read word for word from a stored public domain text with an evidence label, keyword search and cross references, real churches, gatherings and prayer groups w

Soar Flight Booking MCP

Soar Flight Booking MCP is a remote MCP server available at https://mcp.soar.flights.

der die das – German noun genders (Lingviko)

Lingviko

The article (der, die, das) of 90,000 German nouns, compounds included, plus a checker that finds wrong articles in German text (“mit der Zug” → dem). Uses dictionary data, not AI guessing. Free, no login.

Blender

ahujasid

Open-source MCP to use Blender with any LLM

23.6K

Screenpipe

screenpipe

YC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power your agents' context

22.0K
广告合作