Skip to main content
Glama
socfortress

opencti-mcp-server

by socfortress
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

Related Servers

Alternatives to opencti-mcp-server

No user-submitted related servers found.

    Related Servers

    • MISP MCP Server by MISP

      MISP MCP Serverofficial

      MISP
      A
      license
      Not graded
      quality
      C
      maintenance
      Provides read-only access to MISP threat intelligence data, enabling event and attribute search, tag and taxonomy browsing, and galaxy lookups through natural language.
      15
      AGPL 3.0
    • mailfact-mcp by thenewit-eu

      mailfact-mcpofficial

      thenewit-eu
      A
      license
      A
      quality
      C
      maintenance
      Provides read-only access to a Mailfact tenant, letting users list domains, sending sources, and aggregate reports, and query DMARC alignment, reporter coverage, and record-level data through MCP tools. It returns counts and rows only, without recommending policies or scoring domains.
      9
      36 npm
      MIT

    • cf-mcp

      wojtekkura
      A
      license
      B
      quality
      D
      maintenance
      Read-only Cloudflare MCP server for SOC investigation, exposing Cloudflare services like WAF, bot management, analytics, and Zero Trust for querying and discovery.
      32
      MIT
    • Breach Radar by MAASAI-Labs

      Breach Radarofficial

      MAASAI-Labs
      A
      license
      A
      quality
      C
      maintenance
      Enables MCP clients to look up data breaches and leaked passwords, search NVD CVEs and the CISA KEV catalogue, and generate passive attack-surface reports for a domain covering security headers, TLS, email/DNS security, and CT-log subdomains. All checks are read-only and passive, using only public third-party data sources.
      10
      MIT

    • aleph-mcp

      pkreissel
      A
      license
      A
      quality
      B
      maintenance
      Enables read-only investigative research across any Aleph instance, providing ten GET-only tools for searching entities, exploring relationships, discovering datasets, and retrieving document text through MCP clients.
      10
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A3.8/5.0

    Scored across 5 tools

    Disambiguation2/5

    The observable tools overlap heavily: lookup_observable returns linked indicators and reports, get_observable returns linked indicators and reports, and observable_indicators lists linked indicators. The boundary between lookup-by-value and fetch-one-observable is not explicit enough, so an agent could easily choose the wrong tool.

    Naming Consistency4/5

    Most names follow a verb_noun pattern (lookup_observable, search_indicators, get_indicator, get_observable), but observable_indicators breaks the convention as a noun-only name. The set is still readable overall.

    Tool Count5/5

    Five tools is well within the appropriate 3-15 range and fits the focused read-only OpenCTI lookup purpose. Each tool maps to a recognizable query operation.

    Completeness3/5

    The server covers exact observable lookup, observable fetch, indicator search, indicator fetch, and linked indicators, which is a usable core. However, it lacks observable search or listing, report retrieval despite returning report links, and broader relationship exploration, leaving notable dead ends for common CTI workflows.

    Maintenance

    ActivityMaintained
    ResponsivenessNo issues

    Resources