Cyware

Cyware MCP Server

Open-source Model Context Protocol server, written in Go and published under MIT by Cyware Labs, that exposes Cyware Intel Exchange and Cyware Orchestrate to LLM agents as MCP tools. Self-hosted alongside the customer's own tenant over stdio or SSE transport; 40 tools cover CQL search, threat data object details and relations, bulk threat-data actions, tag management, enrichment tools and enrichment execution, quick-add intel, and Orchestrate playbook and app-action execution.

GitHub

Documentation

📖
Documentation
https://github.com/cyware-labs/cyware-mcpserver/blob/main/README.md

Other Resources

🔗
MCPServer
https://raw.githubusercontent.com/api-evangelist/cyware/refs/heads/main/mcp/cyware-mcp.yml
🔗
ToolCrosswalk
https://raw.githubusercontent.com/api-evangelist/cyware/refs/heads/main/mcp/cyware-tool-crosswalk.yml
🔗
SourceCode
https://github.com/cyware-labs/cyware-mcpserver
🔗
APIsJSON
https://raw.githubusercontent.com/api-evangelist/cyware/refs/heads/main/apis.yml

API entry from apis.yml

apis.yml Raw ↑ 
name: Cyware MCP Server
description: Open-source Model Context Protocol server, written in Go and published under MIT by Cyware
  Labs, that exposes Cyware Intel Exchange and Cyware Orchestrate to LLM agents as MCP tools. Self-hosted
  alongside the customer's own tenant over stdio or SSE transport; 40 tools cover CQL search, threat data
  object details and relations, bulk threat-data actions, tag management, enrichment tools and enrichment
  execution, quick-add intel, and Orchestrate playbook and app-action execution.
humanURL: https://github.com/cyware-labs/cyware-mcpserver
baseURL: https://github.com/cyware-labs/cyware-mcpserver
tags:
- mcp
- agentic-ai
- threat-intelligence
- security-operations
properties:
- type: MCPServer
  url: mcp/cyware-mcp.yml
- type: ToolCrosswalk
  url: mcp/cyware-tool-crosswalk.yml
- type: SourceCode
  url: https://github.com/cyware-labs/cyware-mcpserver
- type: Documentation
  url: https://github.com/cyware-labs/cyware-mcpserver/blob/main/README.md