An MCP server for the Cortex observable analysis and active response engine. It enables LLMs to automate security investigations by running analyzers on observables like IPs and URLs and executing automated response actions.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
process.env. You'll be asked to provide them before it can run.CORTEX_API_KEY— Yes - API key for normal operations (org admin level)CORTEX_SUPERADMIN_KEY— No - Superadmin API key for org/user/definition managementCORTEX_TIMEOUT— No 30 Request timeout in secondsCORTEX_URL— Yes - Cortex base URL (e.g., http://cortex.example.com:9001)CORTEX_VERIFY_SSL— No true Set to false to skip SSL verification[](https://m8ven.ai/mcp/solomonneas-cortex-mcp-utsbqz)