MISP MCP Server
A Model Context Protocol server for MISP (Malware Information Sharing Platform), with built-in prompt injection defense powered by prompt-defense-audit.
Why this exists: MISP holds operational threat intel — IOCs, threat actor profiles, attack patterns. When you connect an LLM agent to MISP via MCP, two new attack surfaces emerge:
- Adversarial seeding. A threat actor who can submit content into your MISP instance (or a federated feed) can plant prompt-injection payloads designed to hijack downstream LLM agents.
- Sensitive intel leakage. A manipulated LLM can be coerced into returning intel above its authorized TLP level.
This server wraps every outgoing MISP response in
prompt-defense-audit's output scanner, blocking high-risk patterns before they reach the LLM. Read-only by design — no write tools exposed.
Tracks: MISP/MISP#10745 — MCP server for MISP
Features
- 🛡️ Defense built in — every MISP response scanned for prompt-injection / XSS / shell-injection patterns before being returned
- 🔒 Read-only by design — no event/attribute mutation tools; an LLM cannot modify your threat-intel platform
- 🧰 8 high-utility tools covering events, attributes, search, tags, feeds, galaxies
- ⚡ Zero-config beyond
MISP_URLandMISP_API_KEY - 🪶 Stdio transport — works with Claude Desktop, Cursor, Continue, Cline, any MCP client
- 📋 MIT license — fork freely, use commercially
