MCP.so
登录

MCP Server for TheHive

@gbrigandi

基本信息

分类

其他

许可证

MIT

传输方式

stdio

作者

gbrigandi

关于 MCP Server for TheHive

MCP Server for TheHive

MCP Server for TheHive 配置

暂无标准配置

该服务器的 README 中没有可解析的 MCP 配置块,请前往代码仓库查看安装说明。

代码仓库

MCP Server for TheHive 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表,不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is MCP Server for TheHive?

It is a bridge between MCP clients (such as AI assistants) and the TheHive incident response platform, enabling retrieval and analysis of alerts, case information, and incident response operations.

How to use MCP Server for TheHive?

Configure the server by setting THEHIVE_URL and THEHIVE_API_TOKEN environment variables, then run the pre-compiled binary or build from source. Integrate with an MCP client by adding a server entry in the client’s config, specifying the binary path and environment variables.

Key features of MCP Server for TheHive

  • Retrieve lists of alerts and cases from TheHive
  • Get detailed information for a specific alert or case by ID
  • Promote an alert to a case automatically
  • Create new cases with full details (title, description, severity, tags, etc.)
  • Communicate over stdio using the Model Context Protocol

Use cases of MCP Server for TheHive

  • AI-assisted SOC analysts querying recent security alerts
  • Automatically escalating high-severity alerts into cases
  • Enriching incident response workflows with case creation from tools
  • Fetching case details during triage or reporting

常见问题

1

How do I get a TheHive API token?

Log into your TheHive instance, go to User Settings → API Keys, click Create API Key, and copy the generated token.

2

What environment variables are required?

`THEHIVE_URL` (default `http://localhost:9000/api`) and `THEHIVE_API_TOKEN` (required). Optional: `VERIFY_SSL` (default `false`) and `RUST_LOG`.

3

How does the server communicate with MCP clients?

It communicates over stdio using the MCP protocol. Clients must be configured with the server binary path and environment variables.

4

Are there any dependencies beyond TheHive itself?

The server is a Rust binary; no additional runtime is needed beyond the TheHive 5 instance and a valid API token.

5

What transport does the server use?

It uses stdio-based transport via the Model Context Protocol. No authentication is built into the server beyond the TheHive API token.

评论

其他 分类下的更多 MCP 服务器