MISP MCP SERVER
M

MISP MCP SERVER

一个与MISP平台集成的MCP服务器,为大型语言模型提供威胁情报能力,包括恶意软件检测、威胁情报搜索、IoC提交和报告生成等功能。
2分
8.2K

What is MISP MCP Server?

The MISP MCP Server is a specialized service that connects your security tools with AI assistants. It allows Claude and other LLMs to access real-time threat intelligence from your MISP (Malware Information Sharing Platform) instance, enabling smarter security analysis and malware detection.

How to use MISP MCP Server?

After installation and configuration, you can simply ask your AI assistant security-related questions. The server will automatically query your MISP database and return the latest threat intelligence in an easy-to-understand format.

Use Cases

Ideal for security teams wanting to: 1) Quickly check for new malware threats 2) Investigate suspicious files or URLs 3) Generate threat reports 4) Submit new security findings directly from chat

Key Features

Mac Malware Detection
Get the latest macOS-related malware samples with details about their behavior and indicators
Cross-Platform Threat Intelligence
Search for threats affecting Windows, macOS, Linux, Android, iOS and IoT devices
Advanced Search
Find threats by type, tag, threat actor or classification level (TLP)
IoC Submission
Submit new Indicators of Compromise directly from chat to your MISP instance
Threat Intelligence Reports
Generate comprehensive security reports based on your MISP data
Advantages
Real-time access to your organization's threat intelligence
No need to manually query MISP - get answers through natural language
Reduces investigation time for security analysts
Easy submission of new security findings directly from chat
Limitations
Requires existing MISP instance and API access
Limited to the data available in your MISP instance
Needs proper configuration for optimal performance

Getting Started

Install the Server
Set up the server on a machine that can access your MISP instance
Configure Connection
Set the required environment variables to connect to your MISP instance
Connect to Claude
Configure Claude Desktop to use the MISP MCP server by editing the configuration file

Example Queries

Check for Mac Malware
Ask about recent macOS malware samples found in your organization's threat database
Investigate Suspicious File
Check if a file hash is known to be malicious
Submit New Finding
Report a new suspicious file found during investigation

Frequently Asked Questions

What permissions does the API key need?
Can I use this with cloud MISP instances?
How recent is the threat data?
Is my data sent to external servers?

Additional Resources

MISP Project
Official MISP threat sharing platform website
MCP Protocol
Model Context Protocol documentation
Installation Guide
Detailed installation instructions

安装

复制以下命令到你的Client进行配置
{
  "mcpServers": {
    "misp-intelligence": {
      "command": "python",
      "args": ["/path/to/misp_server.py"],
      "env": {
        "MISP_URL": "https://your-misp-instance.com",
        "MISP_API_KEY": "your-api-key-here",
        "MISP_VERIFY_SSL": "True"
      }
    }
  }
}
注意:您的密钥属于敏感信息,请勿与任何人分享。

替代品

R
Rsdoctor
Rsdoctor 是一款专为 Rspack 生态系统打造的构建分析工具,全面兼容 webpack,提供可视化构建分析、多维度性能诊断及智能优化建议,帮助开发者提升构建效率与工程质量。
TypeScript
7.9K
5分
N
Next Devtools MCP
Next.js开发工具MCP服务器,为Claude、Cursor等AI编程助手提供Next.js开发工具和实用程序,包括运行时诊断、开发自动化和文档访问功能。
TypeScript
9.5K
5分
T
Testkube
Testkube是一个面向云原生应用的测试编排与执行框架,提供统一平台来定义、运行和分析测试,支持现有测试工具和Kubernetes基础设施。
Go
6.2K
5分
M
MCP Windbg
一个MCP服务器,将AI模型与WinDbg/CDB集成,用于分析Windows崩溃转储文件和进行远程调试,支持自然语言交互执行调试命令。
Python
9.8K
5分
R
Runno
Runno是一个JavaScript工具包集合,用于在浏览器和Node.js等环境中安全地运行多种编程语言的代码,通过WebAssembly和WASI实现沙盒化执行,支持Python、Ruby、JavaScript、SQLite、C/C++等语言,并提供Web组件、MCP服务器等集成方式。
TypeScript
7.6K
5分
N
Netdata
Netdata是一个开源实时基础设施监控平台,提供每秒级指标收集、可视化、机器学习驱动的异常检测和自动化告警,无需复杂配置即可实现全栈监控。
Go
9.7K
5分
M
MCP Server
Mapbox MCP服务器是一个Node.js实现的模型上下文协议服务器,为AI应用提供Mapbox地理空间API的访问能力,包括地理编码、兴趣点搜索、路线规划、等时线分析和静态地图生成等功能。
TypeScript
8.8K
4分
U
Uniprof
uniprof是一个简化CPU性能分析的工具,支持多种编程语言和运行时,无需修改代码或添加依赖,可通过Docker容器或主机模式进行一键式性能剖析和热点分析。
TypeScript
7.3K
4.5分
F
Figma Context MCP
Framelink Figma MCP Server是一个为AI编程工具(如Cursor)提供Figma设计数据访问的服务器,通过简化Figma API响应,帮助AI更准确地实现设计到代码的一键转换。
TypeScript
68.7K
4.5分
D
Duckduckgo MCP Server
已认证
DuckDuckGo搜索MCP服务器,为Claude等LLM提供网页搜索和内容抓取服务
Python
77.0K
4.3分
F
Firecrawl MCP Server
Firecrawl MCP Server是一个集成Firecrawl网页抓取能力的模型上下文协议服务器,提供丰富的网页抓取、搜索和内容提取功能。
TypeScript
134.7K
5分
B
Baidu Map
已认证
百度地图MCP Server是国内首个兼容MCP协议的地图服务,提供地理编码、路线规划等10个标准化API接口,支持Python和Typescript快速接入,赋能智能体实现地图相关功能。
Python
45.6K
4.5分
E
Edgeone Pages MCP Server
EdgeOne Pages MCP是一个通过MCP协议快速部署HTML内容到EdgeOne Pages并获取公开URL的服务
TypeScript
30.6K
4.8分
M
Minimax MCP Server
MiniMax Model Context Protocol (MCP) 是一个官方服务器,支持与强大的文本转语音、视频/图像生成API交互,适用于多种客户端工具如Claude Desktop、Cursor等。
Python
59.0K
4.8分
C
Context7
Context7 MCP是一个为AI编程助手提供实时、版本特定文档和代码示例的服务,通过Model Context Protocol直接集成到提示中,解决LLM使用过时信息的问题。
TypeScript
96.3K
4.7分
E
Exa Web Search
已认证
Exa MCP Server是一个为AI助手(如Claude)提供网络搜索功能的服务器,通过Exa AI搜索API实现实时、安全的网络信息获取。
TypeScript
50.9K
5分
AIBase
智启未来,您的人工智能解决方案智库