mrwadams/otx-mcp

A Model Context Protocol (MCP) server for AlienVault OTX (Open Threat Exchange) that provides a comprehensive interface to the OTX API.
## Overview
This MCP server allows you to interact with the AlienVault OTX platform through the Model Context Protocol. The Model Context Protocol (MCP) is an innovative standard that enables applications to provide context and functionality to Large Language Models (LLMs) in a secure, standardized way. Think of it like a web API specifically designed for LLM interactions.
MCP servers can:
Expose data through Resources (used to load information into the LLM's context)
Provide functionality through Tools (used to execute code or produce side effects)
Define interaction patterns through Prompts (reusable templates for LLM interactions)
This server implements the Tools functionality of MCP, providing a comprehensive set of tools for interacting with the OTX platform. It allows AI systems like Claude to retrieve and analyze threat indicators and Pulses in real-time.
## Features
Indicator Search and Analysis: Search for indicators, get detailed information about specific indicators, and validate indicators
Pulse Management: Create, edit, and manage threat intelligence pulses
User Interaction: Follow users, subscribe to pulses, and manage your OTX network
URL Analysis: Submit URLs for analysis to identify potential threats
Event Monitoring: Track recent events and activities on OTX
## Installation
### Option 1: Using Docker (Recommended)
1. Export your OTX API key as an environment variable:
export OTXAPIKEY=yourapikeyhere
2. Authenticate with GitHub Container Registry:
# Create a GitHub Personal Access Token (PAT) with at least 'read:packages' scope
# Go to GitHub → Settings → Developer settings → Personal access tokens → Tokens (classic)
# Generate a new token with 'read:packages' scope
# Login to GitHub Container Registry
docker login ghcr.io -u YOURGITHUBUSERNAME
# When prompted, enter your Personal Access Token as the password
3. Pull the Docker image from GitHub Container Registry:
docker pull ghcr.io/mrwadams/otx-mcp:main
### Option 2: Local Installation
1. Clone this repository
2. Install the required dependencies:
pip install -r requirements.txt
3. Export your OTX API key as an environment variable:
export OTXAPIKEY=yourapikeyhere
Or create a .env file with:
OTXAPIKEY=yourapikeyhere
## Usage
### Using with Claude Desktop
To use this MCP server with Claude Desktop, add the following to your Claude Desktop config file (claudedesktopconfig.json):
json
"mcpServers": {
"otx": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"OTXAPIKEY",
"ghcr.io/mrwadams/otx-mcp:main"
],
"env": {
"OTXAPIKEY": "yourapikeyhere"
Make sure you have:
1. Exported your OTX API key as an environment variable before starting Claude Desktop
2. Authenticated with GitHub Container Registry using a Personal Access Token as described in the installation section
### Using with Other MCP Clients
This MCP server is designed to be used with any MCP-compatible client. The server listens for MCP protocol messages on stdin/stdout, making it compatible with various MCP clients that can execute Docker containers.
## Available Tools