SSyncDev

MISP MCP Server

An MCP server for the open source MISP project

Local serverstdioPython

What is the MISP MCP Server?

An MCP server for the open source MISP project

What you get

A simple Model Context Protocol (MCP) server that exposes MISP (Malware Information Sharing Platform) IOC retrieval functions to MCP-compatible clients like Claude Desktop.

  • Get Recent IOCs — Retrieve IOCs added to MISP in the last 24 hours
  • IOC Summary — Get statistics and counts by IOC type
  • Filter by Type — Get IOCs filtered by specific types (IP, domain, URL, etc.)
  • Save to File — Export IOCs to JSON files
  • Connection Check — Verify MISP connectivity and configuration

Configuration and credentials

  • Python 3.8+ - Access to a MISP instance - MISP API key with appropriate permissions

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

How to install the MISP MCP Server

{
  "mcpServers": {
    "misp-server": {
      "command": "python",
      "args": ["/absolute/path/to/misp_mcp_server.py"],
      "env": {
        "MISP_URL": "https://your-misp-instance.com",
        "MISP_API_KEY": "your-api-key-here"
      }
    }
  }
}

Configuration as documented by the project. Restart the client after saving.

Configuration

  • Python 3.8+ - Access to a MISP instance - MISP API key with appropriate permissions
VariableDescriptionRequired
MISP_URLEndpoint or connection string the server talks to.Yes
MISP_API_KEYCredential the server authenticates with.Yes

Frequently asked questions

Python 3.8+, access to a MISP instance, and a MISP API key with read access to attributes and events.

Alternatives to the MISP MCP Server

Filesystem

Official

Read, search and edit files inside allowed directories with the Model Context Protocol reference Filesystem server.

File Systems & StorageTypeScript★ 63.0k

Context7

Official

Retrieve version-aware library documentation and code examples with Context7 MCP, using resolve-library-id and query-docs.

Documentation & API ReferencesRemoteTypeScript★ 32.0k

MCP

A tool to manage Claude MCP servers configuration

Developer Tools

Github

A model context protocol server for GitHub API

Developer Tools

Wordware

The Wordware MCP (Master Control Program) server allows you to run your Wordware apps locally, with interactive setup.

Developer Tools

Nishati

nishati-mcp

AI & ML Services