MCP.so
登录
M

MCP Threat Intel ORKL

@fr0gger

基本信息

分类

开发工具

传输方式

stdio

作者

fr0gger

提交者

Thomas Roccia

关于 MCP Threat Intel ORKL

This is a threat intel MCP server connected to the ORKL API to retrieve threat report and ask for IOCs, Threat Actors and breaches.

MCP Threat Intel ORKL 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "orkl": {
      "command": "uv",
      "args": [
        "--directory",
        "/MyMCP/mcptest/orkl",
        "run",
        "orkl"
      ]
    }
  }
}

MCP Threat Intel ORKL 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表,不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is MCP Threat Intel ORKL?

MCP Threat Intel ORKL is a Model Context Protocol (MCP) server for querying the ORKL API. It provides tools for fetching and analyzing threat reports, threat actors, and sources, and integrates smoothly with MCP-compatible applications.

How to use MCP Threat Intel ORKL?

Edit or create the Claude desktop config file (claude_desktop_config.json) to add the server configuration with the command uv and the arguments --directory /path/to/orkl run orkl. The server is then available in MCP-compatible clients.

Key features of MCP Threat Intel ORKL

  • Fetch latest threat reports with titles and IDs
  • Retrieve detailed information for a specific threat report
  • Fetch a list of known threat actors
  • Get detailed information for a specific threat actor
  • Fetch a list of sources used in threat intelligence
  • Retrieve detailed metadata for a specific source

Use cases of MCP Threat Intel ORKL

  • Automate retrieval of recent threat intelligence reports for analysis
  • Quickly look up details on a specific threat actor during an investigation
  • Enumerate known sources of threat intelligence for research
  • Integrate ORKL data into a GenAI assistant for security reporting

常见问题

1

What does MCP Threat Intel ORKL do?

It provides MCP tools to query the ORKL API for threat reports, threat actors, and sources, enabling integration with MCP-compatible applications like Claude.

2

How do I install MCP Threat Intel ORKL?

Add the provided JSON configuration to your Claude desktop config file, specifying the path to the server directory and using `uv` to run the `orkl` command.

3

What runtime dependencies does MCP Threat Intel ORKL require?

The server is run via `uv`, which implies Python and the `uv` package manager are required. The exact Python version is not specified in the README.

4

Where does the threat intelligence data come from?

All data is fetched from the ORKL API. No local data storage is mentioned.

5

Does MCP Threat Intel ORKL require authentication?

The README does not mention any authentication requirements for the ORKL API or the MCP server itself.

评论

开发工具 分类下的更多 MCP 服务器