LocalFree

Misp MCP server

ppcvote/misp-mcp-server

Read-only MISP threat intelligence (events, attributes, search, tags, feeds, galaxies) with prompt injection scanning of every response.

2 GitHub stars

Install Misp in Claude Code

This server doesn't publish a package to a registry, so follow the install steps in its README. Once it runs, register it with Claude Code:

Claude Code
claude mcp add misp -- <command to start the server>

Frequently asked questions

What does the Misp MCP server do?

Read-only MISP threat intelligence (events, attributes, search, tags, feeds, galaxies) with prompt injection scanning of every response.

Is the Misp MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does Misp run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add Misp to Claude Code?

Follow the install steps in the project's README at https://github.com/ppcvote/misp-mcp-server, then register it with "claude mcp add".

More security & identity MCP servers

View all