opencti-mcp
用于OpenCTI威胁情报集成的MCP服务器. opencti-mcp is a Model Context Protocol (MCP) server maintained by Spathodea-Network. It connects to MCP-compatible clients such as Claude Desktop, Cursor, Cline, and other agents that speak the protocol. It exposes 16 tools, including get_latest_reports, get_report_by_id, search_malware, search_indicators, search_threat_actors, get_user_by_id, list_users and list_groups, that an agent can call directly. It is categorized under Security/Vulnerability and API/GraphQL.
什么是MCP
OpenCTI MCP服务器是一个模型上下文协议服务器，提供对OpenCTI网络威胁情报平台的标准化访问，通过统一接口实现安全数据的查询和检索。
如何使用此MCP
通过Smithery安装或使用Node.js手动安装，配置包含OpenCTI凭据的环境变量，并使用GraphQL查询与服务器交互以进行威胁情报操作。
此MCP的用途
该服务器支持威胁情报工作流程，包括恶意软件分析、IOC监控、威胁行为者研究以及通过编程方式访问OpenCTI数据生成安全报告。
AIMCP authority
DR and traffic signal for the AIMCP public domain.
Frequently asked questions
What is the opencti-mcp MCP server?
opencti-mcp is a Model Context Protocol server from Spathodea-Network. It lets MCP-compatible AI clients call its tools over a standard interface, so agents like Claude, Cursor, and Cline can use it without custom integration.
How do I connect opencti-mcp to my AI client?
Add opencti-mcp to your client's MCP configuration using the stdio or SSE connection shown in the usage examples on this page, then restart the client to load the server.
What tools does opencti-mcp provide?
opencti-mcp provides 16 tools: get_latest_reports, get_report_by_id, search_malware, search_indicators, search_threat_actors, get_user_by_id, list_users, list_groups, list_attack_patterns, get_campaign_by_name, list_connectors and list_status_templates.
Is opencti-mcp free to use?
opencti-mcp is listed on AIMCP for free. Any API keys or accounts required by the underlying service are set by its provider.
Vernclaw Plugins for OpenClaw
Ready-to-use connectors for SEO data, social reading & content generation. Pay-as-you-go credits with audit logs.