Skip to main content
Glama
OpenCTI MCP Server

OpenCTI MCP Server

by cjmateoo0221

OpenCTI MCP Server

This MCP server provides tools to interact with the OpenCTI platform using the pycti library.

Features

  • check_campaign_exists: Check if a campaign exists in OpenCTI by name

Related MCP server: MCP-Kanka

Requirements

  • Python 3.8+

  • pycti 5.12.33

  • fastmcp

Installation

  1. Install dependencies:

pip install -r requirements.txt
  1. Set up environment variables:

Configuration

Add the following to your MCP settings configuration file:

{
  "mcpServers": {
    "opencti": {
      "command": "python",
      "args": ["C:/Users/JIT/Documents/Cline/MCP/opencti-server/server.py"],
      "env": {
        "OPENCTI_URL": "your-opencti-url",
        "OPENCTI_TOKEN": "your-opencti-token"
      }
    }
  }
}

Usage

Once configured, you can use the following tool:

check_campaign_exists

Check if a campaign exists in OpenCTI by providing its name:

Input: {"name": "APT28"}
Output: {
  "exists": true,
  "campaign": {
    "id": "campaign-id",
    "name": "APT28",
    "description": "...",
    ...
  },
  "message": "Campaign 'APT28' found in OpenCTI"
}

Getting OpenCTI Credentials

  1. Log in to your OpenCTI instance

  2. Navigate to your profile settings

  3. Generate an API token

  4. Copy the token and your OpenCTI instance URL

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Related MCP Connectors

    Related MCP Servers

    • -
      license
      Not graded
      quality
      Not graded
      maintenance
      Enables access to Zocialeye's social media analytics API for campaign data analysis. Provides tools to retrieve campaign categories, keywords, word clouds, messages, summary statistics, and top influencers.
      -
    • A
      license
      B
      quality
      B
      maintenance
      Enables AI assistants to interact with Kanka campaigns through CRUD operations on entities like characters, locations, organizations, and quests, with support for markdown content, batch operations, and efficient synchronization.
      9
      4
      MIT
    • F
      license
      Not graded
      quality
      D
      maintenance
      Provides tools for DeepTempo AI SOC including findings and case management, investigation workflow orchestration, action approval workflows, and MITRE ATT&CK layer generation.
      2
      -
    • A
      license
      A
      quality
      D
      maintenance
      Provides tools for AI assistants to access Amanahfy APIs, enabling campaign details and IP geolocation lookups.
      2
      ISC