Skip to main content
Glama
lidless-labs

misp-mcp

by lidless-labs
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Remote

Related Servers

Alternatives to misp-mcp

No user-submitted related servers found.

    Related Servers

    • MISP-MCP-SERVER

      bornpresident
      F
      license
      Not graded
      quality
      D
      maintenance
      A Model Context Protocol (MCP) server that integrates with the MISP (Malware Information Sharing Platform) to provide threat intelligence capabilities to Large Language Models.
      12
      -

    • MISP MCP Server

      DarkAngel-agents
      F
      license
      Not graded
      quality
      D
      maintenance
      A Model Context Protocol server that connects AI assistants to MISP threat intelligence platforms. It enables threat intelligence search, IOC lookup, and event analysis through natural conversation.
      -

    • Cyberbro MCP Server

      stanfrbd
      A
      license
      A
      quality
      A
      maintenance
      An MCP server that extracts Indicators of Compromise (IoCs) from unstructured text and checks their reputation across multiple threat intelligence services. It enables real-time analysis of IPs, domains, hashes, and URLs, providing enriched context for security workflows within LLMs.
      5
      20 PyPI
      19
      MIT

    • UltraProbe

      ppcvote
      A
      license
      A
      quality
      D
      maintenance
      MISP (Malware Information Sharing Platform) MCP server with built-in prompt injection defense via prompt-defense-audit
      8
      2
      MIT

    • ThreatMCP

      NAXG
      A
      license
      Not graded
      quality
      D
      maintenance
      An MCP server that integrates ThreatBook's threat intelligence API, offering 15 specialized tools for security analysis. It enables AI models to perform IP reputation checks, domain investigations, file sandbox analysis, and vulnerability intelligence lookups.
      51
      MIT

    • cortex-mcp

      lidless-labs
      A
      license
      A
      quality
      A
      maintenance
      An MCP server for the Cortex observable analysis and active response engine. It enables LLMs to automate security investigations by running analyzers on observables like IPs and URLs and executing automated response actions.
      31
      9 npm
      1
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A3.7/5.0

    Scored across 36 tools

    Disambiguation5/5

    Each tool targets a distinct MISP operation (create, delete, search, export, etc.) with no overlap. Even similar tools like misp_search_events and misp_search_attributes are clearly scoped to events vs attributes.

    Naming Consistency5/5

    All tools follow the pattern 'misp_verb_noun' in lowercase with underscores, e.g., misp_add_attribute, misp_delete_event, misp_list_feeds. No deviations or mixed conventions.

    Tool Count4/5

    36 tools is high but appropriate for a comprehensive MISP client covering events, attributes, objects, feeds, galaxies, tags, and more. Slightly heavy but each tool serves a clear purpose.

    Completeness5/5

    The tool surface covers the full lifecycle of threat intelligence in MISP: creation, deletion, search, export, feed management, galaxy/tag attachment, and server status. No obvious gaps for typical workflows.

    Maintenance

    ActivitySlowing
    ResponsivenessSlow

    Resources