Armory
Source
Browse
MCPs

jhuntinfosec-opencti

Connects to OpenCTI threat intelligence platforms with specialized tools for querying malware, threat actors, attack patterns, vulnerabilities, and campaigns, enabling sector-based threat analysis and relationship traversal between STIX entities.

Score
44.2562 signals
Evidence
3 stars · 1 fork
Last commit
as last read from GitHub; most reads are from 2 Sep 2026 or later
Listed

Install

No one-command install. Set it up from its source.

Alternatives · MCPs

  1. crowdstrike-falcon243 stars · 80 forks95.601
  2. jotaderodriguez-bonsai-blender-ifc64 stars · 23 forks89.508
  3. okooo5km-memory-knowledge-graph106 stars · 9 forks89.460

What it is

MCP server OpenCTI, catalogued on PulseMCP. Connects to OpenCTI threat intelligence platforms with specialized tools for querying malware, threat actors, attack patterns, vulnerabilities, and campaigns, enabling sector-based threat analysis and relationship traversal between STIX entities.

When to use it

Connects to OpenCTI threat intelligence platforms with specialized tools for querying malware, threat actors, attack patterns, vulnerabilities, and campaigns, enabling sector-based threat analysis and relationship traversal between STIX entities.

Notes

Listed from the PulseMCP registry. The registry does not state a license. Check it before production use.