MCP Server for Cortex

Example Use Cases

• 1

  Analyze IP addresses using AbuseIPDB data via Cortex.

• 2

  Perform multi-type data analysis (IP, domain, URL, email) using AbuseFinder via Cortex.

• 3

  Scan URLs using VirusTotal or Urlscan.io analyzers through Cortex.

Description

This MCP server acts as a bridge to a Cortex instance, allowing MCP-compatible clients such as large language models to leverage Cortex's powerful analyzers for observable analysis and threat intelligence tasks. It centralizes analysis, supports extensibility with various analyzers, and enables automation and integration with security platforms. The server requires a running Cortex instance with configured analyzers and uses API-key based authentication for secure access.