This MCP server connects Claude Desktop to OpenCTI for AI-augmented threat intelligence analysis, enabling natural language queries and instant, contextualized answers from your threat intelligence database.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
process.env. You'll be asked to provide them before it can run.OPENCTI_URL— Your OpenCTI instance URL (e.g., https://opencti.yourcompany.com)OPENCTI_TOKEN— your-api-token-hereOPENCTI_SSL_VERIFY— Set to false for local dev, true for production with valid SSLMCP_SERVER_PORTMCP_SERVER_HOST— export =0.0.0.0 # ⚠️ Exposes server to networkLOG_LEVELTIMEOUT_SECONDSMAX_INDICATORS_PER_QUERYENABLE_QUERY_CACHINGCACHE_TTL_SECONDSTHREAD_POOL_SIZEENABLE_HEALTH_CHECKSENABLE_METRICSENABLE_AUDIT_LOGGING[](https://m8ven.ai/mcp/coopercybercoffee-opencti-mcp-server-97v7re)