jalacloud/mcp-cti

Developer tools

このページは AI により自動翻訳されています。技術的な詳細は原文をご確認ください。原文を見る

27 stars 5 forks 品質 67 トレンド 11MIT

Repository Install

Repo for experimenting and testing MCP server builds for CTI-related research.

概要

An MCP (Model Context Protocol) server for accessing AlienVault Open Threat Exchange (OTX) threat intelligence directly in Claude. This server connects to AlienVault's OTX DirectConnect API, allowing the Claude for desktop client to search, retrieve, and analyse cyber threat intelligence data. Use this tool to interact with the OTX API using natural language prompting via Claude. By installing this MCP server, you get access to the most recent threat data, including: * Threat intelligence pulses * Indicators of compromise (IOCs) * Malicious IP addresses, domains, and URLs * Malware file hashes * Threat actor information * Real-time Threat Intelligence: Access the latest threat data from AlienVault OTX's global community * Comprehensive IOC Analysis: Check if IPs, domains, URLs, or file hashes are known to be malicious * Threat Actor Profiling: Retrieve information about known threat actors and their activities * Cached Results: Optimised performance with local caching of API...

README

以下は原文 README の抜粋です。原文を見る。

otx-cti MCP Server

An MCP (Model Context Protocol) server for accessing AlienVault Open Threat Exchange (OTX) threat intelligence directly in Claude.

Overview

This server connects to AlienVault’s OTX DirectConnect API, allowing the Claude for desktop client to search, retrieve, and analyse cyber threat intelligence data. Use this tool to interact with the OTX API using natural language prompting via Claude. By installing this MCP server, you get access to the most recent threat data, including:

Threat intelligence pulses
Indicators of compromise (IOCs)
Malicious IP addresses, domains, and URLs
Malware file hashes
Threat actor information

Features

Real-time Threat Intelligence: Access the latest threat data from AlienVault OTX’s global community
Comprehensive IOC Analysis: Check if IPs, domains, URLs, or file hashes are known to be malicious
Threat Actor Profiling: Retrieve information about known threat actors and their activities
Cached Results: Optimised performance with local caching of API responses
Asynchronous API: Built with modern async Python for efficient handling of API requests

Tools Provided

Tool Name	Description
`search_pulses`	Search for threat intelligence pulses in OTX
`get_recent_pulses`	Get recent threat intelligence pulses
`get_pulse_details`	Get detailed information about a specific pulse
`get_pulse_indicators`	Get indicators of compromise (IOCs) from a specific pulse
`get_indicator_details`	Get detailed information about a specific indicator
`check_indicator_malicious`	Check if an indicator is known to be malicious
`get_threat_actor`	Get information about a specific threat actor

Installation

Prerequisites

Python 3.8 or higher
An AlienVault OTX account and API key (Sign up here)
uv package manager (recommended) or pip

Set Up Using UV (Recommended)

Clone this repository:

git clone https://github.com/your-username/otx-mcp-server.git
cd otx-mcp-server

Create a Python environment and install dependencies:

uv venv
source .venv/bin/activate  # On Windows: .venv\Scripts\activate
uv pip install -e

Set Up Using Pip

Clone this repository:

git clone https://github.com/your-username/otx-mcp-server.git
cd otx-mcp-server

Create a Python environment and install dependencies:

python -m venv .venv
source .venv/bin/activate  # On Windows: .venv\Scripts\activate
pip install -e

Quick install with Claude Desktop

Add the following to your Claude Desktop configuration (claude_desktop_config.json):

  "mcpServers": {
    "otx": {
      "command": "uv",
      "args": [
        "--directory",
        "/path/to/otx-mcp-server",
        "run",
        "otx"
      ],
      "env": {

GitHub で README 全文を見る

インストール

This server does not publish a one-line install command.

Open the repository installation guide MCP 初心者？mcpskill.org のガイドから始めましょう →

設定

"mcpServers": {
    "otx": {
      "command": "uv",
      "args": [
        "--directory",
        "/path/to/otx-mcp-server",
        "run",
        "otx"
      ],
      "env": {
        "OTX_API_KEY": "YOUR_API_KEY_HERE"
      }
    }
  }
}