OPTIX MCP
未认领MCP Server for OPTIX Interactions
安装
pip install -r requirements.txt工具（40 个）
account.status
Returns your current OPTIX credit balance, monthly allocation, usage, reset date, and account context.
analyst_notes
string
content_type
string
description
string
detection.attack_matrix
Retrieves the OPTIX MITRE ATT&CK coverage matrix — which techniques have been observed in intelligence data and which have detection rules.
document_id
integer
document.get
Fetches a specific intelligence document by its numeric OPTIX ID.
entity_id
integer
entity_type
string
entity.get
Fetches a named threat intelligence entity (threat actor, malware, campaign, CVE, technique) by name or ID.
feed.cards
Returns profile-matched situational awareness threat cards showing active threats with observed TTPs and targeted sectors.
feed.get
Returns a paginated stream of curated, scored intelligence documents from all OPTIX sources.
feed.headlines
Returns AI-synthesised threat intelligence headlines summarising the most active current threats.
indicators
string[]
ioc.context
Returns enriched community context for an IOC including analyst vote tallies, co-occurring threat actors and malware, ATT&CK techniques, and source documents.
limit
integer
offset
integer
publisher
string
query
string
report_id
integer
report_type
string
report.get
Retrieves the full content of a specific intelligence report.
report.list
Lists generated intelligence reports (tactical, strategic, operational, technical, RFI) stored in OPTIX.
search.documents
Full-text search across all OPTIX intelligence documents.
search.indicator
Searches OPTIX for a specific indicator of compromise (IOC) by value.
sector
string
severity
string
severity_filter
string
since
string
technique_id
string
time_range
string
title
string
tlp
string
tlp_filter
string
tlp_level
string
type_hint
string
value
string
watchlist.add
Adds an entity to the analyst's watchlist to receive notifications when new intelligence mentions it.
watchlist.list
Lists all entities on the analyst's OPTIX watchlist.
watchlist.remove
Removes an entity from the analyst's watchlist.