MISP MCP Server

@sairambokka

代码仓库

基本信息

分类

其他

传输方式

stdio

作者

sairambokka

关于 MISP MCP Server

An MCP server for the open source MISP project

#misp #mcp #server #malware#information-sharing

MISP MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "misp-mcp-server": {
      "command": "python",
      "args": [
        "misp_mcp_server.py"
      ]
    }
  }
}

MISP MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is MISP MCP Server?

MISP MCP Server is a Model Context Protocol (MCP) server that exposes MISP (Malware Information Sharing Platform) IOC retrieval functions to MCP-compatible clients like Claude Desktop. It allows users to fetch recent indicators of compromise, get summary statistics, filter by type, export to JSON, and verify MISP connectivity.

How to use MISP MCP Server?

Install Python dependencies, set the MISP_URL and MISP_API_KEY environment variables, and run python misp_mcp_server.py. Then configure an MCP client (e.g., Claude Desktop) with the command python and the absolute path to the script, along with the environment variables. The server listens via STDIO and exposes five tools and one resource.

Key features of MISP MCP Server

Retrieve IOCs added to MISP in the last 24 hours.
Get summary statistics and counts by IOC type.
Filter IOCs by specific types (IP, domain, URL, etc.).
Export IOCs to JSON files.
Verify MISP connection and configuration.

Use cases of MISP MCP Server

Security analysts querying recent threat indicators from MISP via Claude Desktop.
Automated IOC retrieval for integration into security workflows.
Quickly checking MISP configuration and connectivity.
Generating daily IOC reports filtered by type.
Saving IOCs to structured files for further analysis.

常见问题

What are the prerequisites for running MISP MCP Server?

Python 3.8+, access to a MISP instance, and a MISP API key with read access to attributes and events.

How do I connect MISP MCP Server to Claude Desktop?

Add a configuration entry in Claude's `claude_desktop_config.json` with the command `python`, the absolute path to the script, and the `MISP_URL` and `MISP_API_KEY` environment variables.

What tools does MISP MCP Server provide?

It provides five tools: `get_recent_iocs()`, `get_ioc_summary()`, `get_iocs_by_type()`, `save_iocs_to_file()`, and `check_misp_connection()`.

Why am I getting a "Failed to connect to MISP" error?

Check that your `MISP_URL` is correct, the MISP instance is accessible from your network, and there are no SSL certificate issues (the script uses `ssl=False` for local instances).

Why are no IOCs returned?

This is normal if no IOCs were added to MISP in the last 24 hours.

其他分类下的更多 MCP 服务器

Hindsight

vectorize-io

Hindsight: Agent Memory That Learns

50.4K

Health by Dr Brad

Dr Brad Stanfield

Health by Dr Brad works out a health plan from your own results: which screening is due at your age, and evidence-based suggestions, each with the reason and the published guideline or study behind it. Your record is one

Reactive Resume

amruthpillai

A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!

39.5K

ICSS

chokcoco

不止于 CSS

20.7K

The Living Bread

A free remote MCP server for The Living Bread. Bible passages read word for word from a stored public domain text with an evidence label, keyword search and cross references, real churches, gatherings and prayer groups w