AIBase
EN
Explore
MISP MCP SERVER
M

MISP MCP SERVER

An MCP server integrated with the MISP platform, providing threat intelligence capabilities for large language models, including malware detection, threat intelligence search, IoC submission, and report generation.
SecurityDeveloper tools#Threat Intelligence#Malware Detection#MISP Integration#Security Analysis.Python
2 points
9.1K
Open Site

Overview

Installation

Content Details

Alternatives

What is MISP MCP Server?

The MISP MCP Server is a specialized service that connects your security tools with AI assistants. It allows Claude and other LLMs to access real-time threat intelligence from your MISP (Malware Information Sharing Platform) instance, enabling smarter security analysis and malware detection.

How to use MISP MCP Server?

After installation and configuration, you can simply ask your AI assistant security-related questions. The server will automatically query your MISP database and return the latest threat intelligence in an easy-to-understand format.

Use Cases

Ideal for security teams wanting to: 1) Quickly check for new malware threats 2) Investigate suspicious files or URLs 3) Generate threat reports 4) Submit new security findings directly from chat

Key Features

Mac Malware Detection
Get the latest macOS-related malware samples with details about their behavior and indicators
Cross-Platform Threat Intelligence
Search for threats affecting Windows, macOS, Linux, Android, iOS and IoT devices
Advanced Search
Find threats by type, tag, threat actor or classification level (TLP)
IoC Submission
Submit new Indicators of Compromise directly from chat to your MISP instance
Threat Intelligence Reports
Generate comprehensive security reports based on your MISP data
Advantages
Real-time access to your organization's threat intelligence
No need to manually query MISP - get answers through natural language
Reduces investigation time for security analysts
Easy submission of new security findings directly from chat
Limitations
Requires existing MISP instance and API access
Limited to the data available in your MISP instance
Needs proper configuration for optimal performance

Getting Started

Install the Server
Set up the server on a machine that can access your MISP instance
Configure Connection
Set the required environment variables to connect to your MISP instance
Connect to Claude
Configure Claude Desktop to use the MISP MCP server by editing the configuration file

Example Queries

Check for Mac Malware
Ask about recent macOS malware samples found in your organization's threat database
Investigate Suspicious File
Check if a file hash is known to be malicious
Submit New Finding
Report a new suspicious file found during investigation

Frequently Asked Questions

What permissions does the API key need?
Can I use this with cloud MISP instances?
How recent is the threat data?
Is my data sent to external servers?

Additional Resources

MISP Project
Official MISP threat sharing platform website
MCP Protocol
Model Context Protocol documentation
Installation Guide
Detailed installation instructions

Installation

Copy the following command to your Client for configuration
{
  "mcpServers": {
    "misp-intelligence": {
      "command": "python",
      "args": ["/path/to/misp_server.py"],
      "env": {
        "MISP_URL": "https://your-misp-instance.com",
        "MISP_API_KEY": "your-api-key-here",
        "MISP_VERIFY_SSL": "True"
      }
    }
  }
}
Note: Your key is sensitive information, do not share it with anyone.

Alternatives

V
Vestige
Vestige is an AI memory engine based on cognitive science. By implementing 29 neuroscience modules such as prediction error gating, FSRS - 6 spaced repetition, and memory dreaming, it provides long - term memory capabilities for AI. It includes a 3D visualization dashboard and 21 MCP tools, runs completely locally, and does not require the cloud.
Rust
9.5K
4.5 points
M
Moltbrain
MoltBrain is a long-term memory layer plugin designed for OpenClaw, MoltBook, and Claude Code, capable of automatically learning and recalling project context, providing intelligent search, observation recording, analysis statistics, and persistent storage functions.
TypeScript
10.1K
4.5 points
B
Bm.md
A feature-rich Markdown typesetting tool that supports multiple style themes and platform adaptation, providing real-time editing preview, image export, and API integration capabilities
TypeScript
15.9K
5 points
S
Security Detections MCP
Security Detections MCP is a server based on the Model Context Protocol that allows LLMs to query a unified security detection rule database covering Sigma, Splunk ESCU, Elastic, and KQL formats. The latest version 3.0 is upgraded to an autonomous detection engineering platform that can automatically extract TTPs from threat intelligence, analyze coverage gaps, generate SIEM-native format detection rules, run tests, and verify. The project includes over 71 tools, 11 pre-built workflow prompts, and a knowledge graph system, supporting multiple SIEM platforms.
TypeScript
6.7K
4 points
P
Paperbanana
Python
8.9K
5 points
B
Better Icons
An MCP server and CLI tool that provides search and retrieval of over 200,000 icons, supports more than 150 icon libraries, and helps AI assistants and developers quickly obtain and use icons.
TypeScript
8.7K
4.5 points
A
Assistant Ui
assistant - ui is an open - source TypeScript/React library for quickly building production - grade AI chat interfaces, providing composable UI components, streaming responses, accessibility, etc., and supporting multiple AI backends and models.
TypeScript
10.0K
5 points
A
Apify MCP Server
The Apify MCP Server is a tool based on the Model Context Protocol (MCP) that allows AI assistants to extract data from websites such as social media, search engines, and e-commerce through thousands of ready-to-use crawlers, scrapers, and automation tools (Apify Actors). It supports OAuth and Skyfire proxy payment and can be integrated into MCP clients such as Claude and VS Code through HTTPS endpoints or local stdio.
TypeScript
8.9K
5 points
M
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
38.1K
5 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
80.3K
4.3 points
G
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
28.5K
4.3 points
N
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
23.8K
4.5 points
F
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
69.6K
4.5 points
U
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
37.4K
5 points
G
Gmail MCP Server
A Gmail automatic authentication MCP server designed for Claude Desktop, supporting Gmail management through natural language interaction, including complete functions such as sending emails, label management, and batch operations.
TypeScript
24.0K
4.5 points
M
Minimax MCP Server
The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.
Python
56.4K
4.8 points
AIBase
Zhiqi Future, Your AI Solution Think Tank
English简体中文繁體中文にほんご
© 2026AIBase