lookup_indicator

Active

declared in 0.1.0

Look up an indicator (IPv4, domain, URL, or file hash) in OTX. Returns pulses referencing the indicator and observed-context fields. type auto-detected when omitted.

Parameters schema

{
  "type": "object",
  "examples": [
    {
      "indicator": "192.0.2.1"
    },
    {
      "type": "domain",
      "indicator": "example.com"
    },
    {
      "type": "file",
      "indicator": "d41d8cd98f00b204e9800998ecf8427e"
    }
  ],
  "required": [
    "indicator"
  ],
  "properties": {
    "type": {
      "enum": [
        "IPv4",
        "IPv6",
        "domain",
        "hostname",
        "url",
        "file"
      ],
      "type": "string",
      "description": "Force a type instead of auto-detecting"
    },
    "indicator": {
      "type": "string",
      "description": "IPv4, domain, URL, or file hash (md5/sha1/sha256)"
    }
  }
}

What this tool wraps· 0 endpoints

min confidence0.70 0.50

No endpoints wrapped at confidence ≥ 0.50.

Parent server

Alienvault Otx

https://github.com/pipeworx-io/mcp-alienvault-otx

1/7 registries

View full server →