opencti-mcp

What is this MCP

OpenCTI MCP Server is a Model Context Protocol server that provides standardized access to OpenCTI's cyber threat intelligence platform, enabling querying and retrieval of security data through a unified interface.

How to use this MCP

Install via Smithery or manually with Node.js, configure environment variables with OpenCTI credentials, and interact with the server using GraphQL queries for threat intelligence operations.

What this MCP can be used for

The server enables threat intelligence workflows including malware analysis, IOC monitoring, threat actor research, and security report generation through programmatic access to OpenCTI data.