misp-mcp-server

ppcvote/misp-mcp-server
★ 0 stars TypeScript 🤖 AI/LLM Updated today
MISP (Malware Information Sharing Platform) MCP server with built-in prompt injection defense via prompt-defense-audit
View on GitHub →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "misp-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "ppcvote/misp-mcp-server"
      ]
    }
  }
}

README Excerpt

A **Model Context Protocol** server for [MISP](https://www.misp-project.org/) (Malware Information Sharing Platform), with **built-in prompt injection defense** powered by [`prompt-defense-audit`](https://www.npmjs.com/package/prompt-defense-audit). > **Why this exists:** MISP holds operational threat intel — IOCs, threat actor profiles, attack patterns. When you connect an LLM agent to MISP via MCP, two new attack surfaces emerge:

Tools (12)

MISP_API_KEYMISP_INSECURE_TLSMISP_URLPROMPT_DEFENSE_DISABLEDmisp_get_eventmisp_list_eventsmisp_list_feedsmisp_list_galaxiesmisp_list_tagsmisp_search_attributesmisp_search_eventsmisp_version

Topics

ai-securityclaudecybersecurityllm-securitymcpmispmodel-context-protocolprompt-injectionthreat-intelligence