{"slug":"Spathodea-Network/opencti-mcp","name":"OpenCTI MCP Server","description":"Integrates with the OpenCTI platform to query and retrieve threat intelligence data.","category":"database","tags":[],"official":false,"stars":38,"transport":"http","install":[{"cmd":"npx -y @smithery/cli","imports":[]}],"tools":[{"name":"search_threat_actors","description":"Search for threat actors in OpenCTI"},{"name":"get_threat_actor","description":"Get details of a specific threat actor"},{"name":"search_intrusion_sets","description":"Search for intrusion sets in OpenCTI"},{"name":"get_intrusion_set","description":"Get details of a specific intrusion set"},{"name":"search_campaigns","description":"Search for campaigns in OpenCTI"},{"name":"get_campaign","description":"Get details of a specific campaign"},{"name":"search_indicators","description":"Search for indicators in OpenCTI"},{"name":"get_indicator","description":"Get details of a specific indicator"},{"name":"search_observables","description":"Search for observables in OpenCTI"},{"name":"get_observable","description":"Get details of a specific observable"},{"name":"search_reports","description":"Search for reports in OpenCTI"},{"name":"get_report","description":"Get details of a specific report"},{"name":"search_vulnerabilities","description":"Search for vulnerabilities in OpenCTI"},{"name":"get_vulnerability","description":"Get details of a specific vulnerability"},{"name":"search_malware","description":"Search for malware in OpenCTI"},{"name":"get_malware","description":"Get details of a specific malware"},{"name":"search_tools","description":"Search for tools in OpenCTI"},{"name":"get_tool","description":"Get details of a specific tool"},{"name":"search_attack_patterns","description":"Search for attack patterns in OpenCTI"},{"name":"get_attack_pattern","description":"Get details of a specific attack pattern"},{"name":"search_courses_of_action","description":"Search for courses of action in OpenCTI"},{"name":"get_course_of_action","description":"Get details of a specific course of action"},{"name":"search_identities","description":"Search for identities in OpenCTI"},{"name":"get_identity","description":"Get details of a specific identity"},{"name":"search_locations","description":"Search for locations in OpenCTI"},{"name":"get_location","description":"Get details of a specific location"},{"name":"search_labels","description":"Search for labels in OpenCTI"},{"name":"get_label","description":"Get details of a specific label"},{"name":"search_kill_chain_phases","description":"Search for kill chain phases in OpenCTI"},{"name":"get_kill_chain_phase","description":"Get details of a specific kill chain phase"},{"name":"search_external_references","description":"Search for external references in OpenCTI"},{"name":"get_external_reference","description":"Get details of a specific external reference"},{"name":"search_notes","description":"Search for notes in OpenCTI"},{"name":"get_note","description":"Get details of a specific note"},{"name":"search_opinions","description":"Search for opinions in OpenCTI"},{"name":"get_opinion","description":"Get details of a specific opinion"},{"name":"search_relationships","description":"Search for relationships in OpenCTI"},{"name":"get_relationship","description":"Get details of a specific relationship"},{"name":"create_indicator","description":"Create a new indicator in OpenCTI"},{"name":"create_observable","description":"Create a new observable in OpenCTI"},{"name":"create_report","description":"Create a new report in OpenCTI"},{"name":"create_threat_actor","description":"Create a new threat actor in OpenCTI"},{"name":"create_intrusion_set","description":"Create a new intrusion set in OpenCTI"},{"name":"create_campaign","description":"Create a new campaign in OpenCTI"},{"name":"create_malware","description":"Create a new malware in OpenCTI"},{"name":"create_tool","description":"Create a new tool in OpenCTI"},{"name":"create_vulnerability","description":"Create a new vulnerability in OpenCTI"},{"name":"create_attack_pattern","description":"Create a new attack pattern in OpenCTI"},{"name":"create_course_of_action","description":"Create a new course of action in OpenCTI"},{"name":"create_identity","description":"Create a new identity in OpenCTI"},{"name":"create_location","description":"Create a new location in OpenCTI"},{"name":"create_note","description":"Create a new note in OpenCTI"},{"name":"create_opinion","description":"Create a new opinion in OpenCTI"},{"name":"create_relationship","description":"Create a new relationship in OpenCTI"},{"name":"update_indicator","description":"Update an existing indicator in OpenCTI"},{"name":"update_observable","description":"Update an existing observable in OpenCTI"},{"name":"update_report","description":"Update an existing report in OpenCTI"},{"name":"update_threat_actor","description":"Update an existing threat actor in OpenCTI"},{"name":"update_intrusion_set","description":"Update an existing intrusion set in OpenCTI"},{"name":"update_campaign","description":"Update an existing campaign in OpenCTI"},{"name":"update_malware","description":"Update an existing malware in OpenCTI"},{"name":"update_tool","description":"Update an existing tool in OpenCTI"},{"name":"update_vulnerability","description":"Update an existing vulnerability in OpenCTI"},{"name":"update_attack_pattern","description":"Update an existing attack pattern in OpenCTI"},{"name":"update_course_of_action","description":"Update an existing course of action in OpenCTI"},{"name":"update_identity","description":"Update an existing identity in OpenCTI"},{"name":"update_location","description":"Update an existing location in OpenCTI"},{"name":"update_note","description":"Update an existing note in OpenCTI"},{"name":"update_opinion","description":"Update an existing opinion in OpenCTI"},{"name":"delete_indicator","description":"Delete an indicator from OpenCTI"},{"name":"delete_observable","description":"Delete an observable from OpenCTI"},{"name":"delete_report","description":"Delete a report from OpenCTI"},{"name":"delete_threat_actor","description":"Delete a threat actor from OpenCTI"},{"name":"delete_intrusion_set","description":"Delete an intrusion set from OpenCTI"},{"name":"delete_campaign","description":"Delete a campaign from OpenCTI"},{"name":"delete_malware","description":"Delete a malware from OpenCTI"},{"name":"delete_tool","description":"Delete a tool from OpenCTI"},{"name":"delete_vulnerability","description":"Delete a vulnerability from OpenCTI"},{"name":"delete_attack_pattern","description":"Delete an attack pattern from OpenCTI"},{"name":"delete_course_of_action","description":"Delete a course of action from OpenCTI"},{"name":"delete_identity","description":"Delete an identity from OpenCTI"},{"name":"delete_location","description":"Delete a location from OpenCTI"},{"name":"delete_note","description":"Delete a note from OpenCTI"},{"name":"delete_opinion","description":"Delete an opinion from OpenCTI"},{"name":"delete_relationship","description":"Delete a relationship from OpenCTI"}],"env_vars":["OPENCTI_URL","OPENCTI_TOKEN"],"auth_type":"none","github":"https://github.com/Spathodea-Network/opencti-mcp","homepage":"","server_url":"","status":"active","source":"mcpservers.org","updated_at":"Mon May 25"}