TheHive FastMCP
Related Servers
Alternatives to TheHive FastMCP
No user-submitted related servers found.
Related Servers
- AlicenseAqualityAmaintenanceAn MCP server for the Cortex observable analysis and active response engine. It enables LLMs to automate security investigations by running analyzers on observables like IPs and URLs and executing automated response actions.318 npm1MIT
- AlicenseNot gradedqualityAmaintenanceAn MCP server that exposes a 60+ tool security and threat-intel stack to AI agents, enabling secret scanning, Sigma rule generation, ransomware lookup, OSINT, and deep research.1MIT
- AlicenseNot gradedqualityDmaintenanceAn MCP server that connects AI agents to the CrowdStrike Falcon platform for intelligent security analysis and automation across various security modules. It provides programmatic access to detections, incidents, host management, and threat intelligence to enhance security operations within agentic workflows.MIT
- AlicenseAqualityBmaintenanceMCP server for offensive-security tooling, enabling AI agents to run reconnaissance, CVE intelligence, JavaScript analysis, HTTP probing, and port scanning against authorized targets.10MIT
- AlicenseAqualityDmaintenanceMCP server that exposes OSSEC HIDS security monitoring capabilities as tools, resources, and prompts for AI assistants.262MIT

@chargebee/mcpofficial
AlicenseAqualityFmaintenanceMCP Server that connects AI agents to Chargebee Platform.254 npm16MIT
TDQS
Scored across 11 tools
Each tool targets a distinct entity (alert, case, task, observable) and action (create, get, search, add). There is no overlap in functionality; for instance, create_alert and create_case are clearly different, and get_alert vs get_case are unambiguously separate.
All tool names follow a consistent verb_noun pattern using snake_case (e.g., create_alert, get_case, search_cases). There are no deviations, mixed conventions, or ambiguous verbs.
With 11 tools, the server covers the essential operations for TheHive (alerts, cases, tasks, observables). The count is balanced—neither too few to be useless nor too many to be overwhelming.
The server provides create, get, and search operations for alerts and cases, but lacks update and delete operations for both. Additionally, there is no tool to promote an alert to a case or to close/merge cases. These gaps are notable for full lifecycle management.