Browse
→ Infrastructure
→ Cyware MCP Server
Cyware MCP Server
Open-source MCP server from Cyware that brings natural language interfaces to cyber threat intelligence workflows. Integrates with Cyware Intel Exchange and Cyware Orchestrate, enabling SOC analysts to query, summarize and act on threat intelligence data using conversational AI. Supports indicator lookups, CQL search translations, bulk tagging, enrichment metadata, playbook triggering and policy-based automation. Features comprehensive logging, auditability and explainability. Available on GitHub under open-source license.
MCP unverified
Integration
| Transport | stdio |
| Auth | api-key |
| Endpoint | https://github.com/cyware-labs/cyware-mcpserver |
Use Cases
| 01 | Query and filter threat indicators using natural language through AI assistants connected to the Cyware MCP server instead of memorizing complex CQL query syntax |
| 02 | Enable SOC analysts to trigger Cyware Orchestrate playbooks and automate incident response actions through conversational AI commands via MCP |
| 03 | Build AI-powered threat intelligence workflows where agents search indicators, enrich data, manage tags and generate investigation summaries from Cyware Intel Exchange via MCP |
Tags
threat-intelligence cybersecurity soc security-operations open-source incident-response
Machine-readable: /api/servers.json
· JSON-LD schema embedded in <head>