misp_list_feeds
List all configured threat intelligence feeds and IOC sources in MISP, with optional filtering by enabled status.
Instructions
List configured MISP feeds (threat intel sources, IOC feeds, etc.)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| enabled | No | Filter by enabled/disabled status |
Implementation Reference
- src/tools/feeds.ts:7-57 (handler)The MCP tool handler for 'misp_list_feeds'. Uses server.tool() to register the tool with name 'misp_list_feeds', accepts an optional 'enabled' boolean parameter, calls client.listFeeds(), optionally filters by enabled status, and returns a formatted JSON summary of feeds.
server.tool( "misp_list_feeds", "List configured MISP feeds (threat intel sources, IOC feeds, etc.)", { enabled: z .boolean() .optional() .describe("Filter by enabled/disabled status"), }, async ({ enabled }) => { try { let feeds = await client.listFeeds(); if (enabled !== undefined) { feeds = feeds.filter((f) => f.enabled === enabled); } if (feeds.length === 0) { return { content: [{ type: "text", text: "No feeds found." }], }; } const summary = feeds.map((f) => ({ id: f.id, name: f.name, provider: f.provider, url: f.url, enabled: f.enabled, source_format: f.source_format, distribution: f.distribution, event_id: f.event_id, caching_enabled: f.caching_enabled, })); return { content: [{ type: "text", text: JSON.stringify(summary, null, 2) }], }; } catch (err) { return { content: [ { type: "text", text: `Error listing feeds: ${err instanceof Error ? err.message : String(err)}`, }, ], isError: true, }; } } ); - src/index.ts:40-40 (registration)Registration call: registerFeedTools(server, client) in src/index.ts line 40, which triggers the tool registration in feeds.ts.
registerFeedTools(server, client); - src/client.ts:599-605 (helper)Client helper method MispClient.listFeeds() that makes a GET request to /feeds and maps the response to MispFeed[] objects.
async listFeeds(): Promise<MispFeed[]> { const data = await this.request<Array<{ Feed: MispFeed }>>( "GET", "/feeds" ); return (data || []).map((f) => f.Feed); } - src/types.ts:84-94 (schema)TypeScript interface MispFeed defining the schema for feed objects returned by the tool.
export interface MispFeed { id: string; name: string; provider: string; url: string; enabled: boolean; source_format: string; distribution: string; event_id: string; caching_enabled: boolean; }