MCP Threat Intel Orkl

🚀 ORKL MCP Server

This is a Model Context Protocol (MCP) server designed for querying the ORKL API. It provides tools for obtaining and analyzing threat reports, threat actors, and source information, and seamlessly integrates with MCP-compatible applications.

Full detailed information can be found at the following link: Building a Threat Intelligence GenAI Reporter with ORKL and Claude

🚀 Quick Start

📦 Installation

Edit or create the file: /Users/user/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "orkl": {
      "command": "uv",
      "args": [
        "--directory",
        "/MyMCP/mcptest/orkl",
        "run",
        "orkl"
      ]
    }
  }
}

⚠️ Important Note

Administrator privileges may be required during the installation process. It is recommended to run the relevant commands in the terminal and ensure that the paths are correct.

💻 Usage Examples

🛠️ Tools

📄 Report Tools

Fetch Latest Threat Reports

• Name: fetch_latest_threat_reports
• Description: Retrieve recent threat reports along with their titles and IDs.
• Parameters: None

Fetch Threat Report Details

• Name: fetch_threat_report_details
• Description: Obtain detailed information about a specific threat report based on the report ID.
• Parameters:
  • report_id (Required): The ID of the threat report.

👥 Threat Actor Tools

Fetch Threat Actors

• Name: fetch_threat_actors
• Description: Get a list of known threat actors along with their IDs and names.
• Parameters: None

Fetch Threat Actor Details

• Name: fetch_threat_actor_details
• Description: Retrieve detailed information about a specific threat actor based on the actor ID.
• Parameters:
  • actor_id (Required): The ID of the threat actor.

📚 Source Tools

Fetch Sources

• Name: fetch_sources
• Description: Obtain a list of sources used for threat intelligence.
• Parameters: None

Fetch Source Details

• Name: fetch_source_details
• Description: Get detailed information about a specific source based on the source ID.
• Parameters:
  • source_id (Required): The ID of the source.

📄 License

This project is licensed under the MIT License.