Back to Home
CooperCyberCoffee icon

opencti_mcp_server

Verified Safe

by CooperCyberCoffee

Overview

Connects Claude Desktop to OpenCTI's threat intelligence platform for AI-augmented threat intelligence analysis and reporting, enabling natural language queries and context-aware responses.

Installation

Run Command
python main.py

Environment Variables

  • OPENCTI_URL
  • OPENCTI_TOKEN

Security Notes

Comprehensive security audit report is provided within the codebase. The project implements multi-layered security controls including TLP filtering (server-side and client-side), robust input validation (against SQL/XSS/template injection, path traversal, null bytes), secure configuration practices (e.g., `yaml.safe_load()`), rate limiting, and detailed audit logging with SHA256 integrity hashing for tamper detection. Default network binding is `127.0.0.1` (localhost only). Dependencies are actively monitored for CVEs and explicitly updated (e.g., `cryptography` CVE fixes in v0.4.2). Parameter sanitization is performed before logging sensitive data.

Similar Servers

Stats

Interest Score62
Security Score9
Cost ClassHigh
Avg Tokens3500
Stars19
Forks3
Last Update2025-11-29

Tags

Threat IntelligenceOpenCTIAISecurityCustomization