mcp-server-cortex logo

mcp-server-cortexMCP Server for Cortex

— (0)
Daniel NikulshynReviewed by Daniel Nikulshyn·Updated July 2026

Overview

The MCP Server for Cortex acts as a bridge, exposing the analysis capabilities of a Cortex instance to Model Context Protocol (MCP) clients. It allows large language models like Claude to leverage Cortex analyzers for threat intelligence tasks. Cortex is a free, open-source observable analysis and active response engine that analyzes observables like IPs, URLs, and domains using modular analyzers. The MCP server makes Cortex's benefits, such as centralized analysis, extensibility, automation, integration, and security, accessible to MCP-compatible clients.

Key features

  • Exposes Cortex analysis capabilities to MCP clients
  • Supports various analyzers for threat intelligence
  • API-key based access control

Pricing

Model
Free
Category
MCP Servers
Rating
No reviews yet

Use cases

Threat Intelligence Analysis

Large language models use the MCP Server for Cortex to analyze observables like IPs and URLs for threat intelligence.

Security Incident Response

The MCP Server for Cortex integrates with Security Incident Response Platforms like TheHive to provide automated analysis and enrichment of observables.

Pros & Cons

Pros

  • Centralized analysis capabilities
  • Extensibility with easily added analyzers
  • API-key based access for security

Cons

  • Requires a running Cortex instance
  • Needs specific analyzers to be enabled and configured

Reviews

Sign in to leave a review.

No reviews yet. Be the first!

Q&A

What are the key benefits?

The key benefits of using mcp-server-cortex include centralized analysis, extensibility with easily added analyzers, automation, and security.

Asked by Kenji Watanabe · Apr 7, 2026

How is access controlled?

Access is controlled through API-key based authentication, providing a layer of security for the Cortex instance.

Asked by Ahmed Saleh · Feb 24, 2026

What is required to run mcp-server-cortex?

A running Cortex instance and specific analyzers enabled and configured within it are required to run mcp-server-cortex. Additionally, an API key for Cortex with permissions to list analyzers and run jobs is needed.

Asked by Mohammed Al-Amin · Feb 13, 2026

Ask a question

MCP Servers alternatives

Playwright MCP interface preview
Playwright MCPMCP Servers

Open-source MCP server that lets LLMs drive real browsers via Playwright and accessibility snapshots.

4.8 (6)
Free
Pydantic AI interface preview
Pydantic AIMCP Servers

Python agent framework from the Pydantic team for building type-safe GenAI apps.

4.8 (6)
Free
Cognee interface preview
CogneeMCP Servers

Adaptive memory layer that helps AI agents learn from context over time.

4.8 (5)
Free
Inbox Zero interface preview
Inbox ZeroMCP Servers

AI email assistant that organizes, drafts replies, and helps you reach inbox zero faster.

4.8 (4)
Free
Screenpipe interface preview
ScreenpipeMCP Servers

Open-source 24/7 local screen and audio recording for building context-aware AI apps

4.8 (4)
Free
AgentKit interface preview
AgentKitMCP Servers

TypeScript library for building and orchestrating AI agents with tools, memory, and multi-agent workflows.

4.5 (4)
Free
onchain-mcp logo
onchain-mcpMCP Servers

Bringing the bankless onchain API to MCP

— (0)
26Free
markitdown logo
markitdownMCP Servers

Python tool for converting files and office documents to Markdown.

— (0)
23Free