Skip to main content
Glama
hdyrawan

agentic-misp-mcp

by hdyrawan
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

Related Servers

Alternatives to agentic-misp-mcp

No user-submitted related servers found.

    Related Servers

    • MISP-mcp

      Eacus
      F
      license
      Not graded
      quality
      D
      maintenance
      Enables AI assistants to interact with MISP threat intelligence platforms through natural language, supporting event search, creation, user management, and report generation.
      12
      -

    • misp-mcp

      lidless-labs
      A
      license
      A
      quality
      A
      maintenance
      An MCP server that enables LLMs to interact with MISP for threat intelligence sharing, IOC lookups, and event management. It provides tools for investigating indicators, discovering correlations, and exporting intelligence in formats like STIX and Suricata.
      36
      10 npm
      2
      MIT

    • Nullcone MCP Server

      maco144
      F
      license
      Not graded
      quality
      D
      maintenance
      Provides real-time threat intelligence for AI agents, enabling checks on IPs, domains, URLs, hashes, CVEs, prompt-injection payloads, and malicious AI-skill/MCP-tool definitions against a free database of 890K+ IOCs.
      -

    • MISP MCP Server

      DarkAngel-agents
      F
      license
      Not graded
      quality
      D
      maintenance
      A Model Context Protocol server that connects AI assistants to MISP threat intelligence platforms. It enables threat intelligence search, IOC lookup, and event analysis through natural conversation.
      -

    • secops-agent-triage

      drummer475-94
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables AI agents to perform security alert triage by ingesting raw logs, extracting IOCs, querying threat intelligence sources, and generating structured NIST/MITRE assessments with reasoning traces.
      MIT

    • OpenCTI MCP Server

      Space-C0wboy
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI assistants to query and manage OpenCTI threat intelligence data, including indicators, observables, reports, malware, and more, with read-only and optional write operations.
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    C2.7/5.0

    Scored across 25 tools

    Disambiguation2/5

    Several tools have fuzzy boundaries: summarize_event, explain_event_context, generate_event_report, and generate_markdown_event_report all produce event interpretations/reports, and IOC investigation/report generation tools overlap heavily. Descriptions differentiate them somewhat, but an agent could easily select the wrong report or investigation tool.

    Naming Consistency5/5

    All tool names follow a consistent snake_case verb_noun pattern, with a clear with_approval suffix on write operations and consistent prefixes like get_, search_, generate_, propose_, and find_. The naming is predictable and uniform despite the large tool count.

    Tool Count3/5

    25 tools sits at the heavy end of the acceptable range. The breadth is justified by MISP's read/analysis/reporting and approval-gated write workflows, but the many near-duplicate reporting and investigation tools make the set feel larger and more redundant than necessary.

    Completeness3/5

    The read, search, analysis, and feed-health side is well covered, and approval-gated write tools exist for publishing, tagging, sightings, and IOC submission. However, there is no real create/update/delete event or attribute lifecycle beyond proposals and IOCs, leaving notable workflow gaps for an agent trying to manage MISP data end-to-end.

    Maintenance

    ActivityStale
    ResponsivenessNo issues

    Resources