Skip to content
Verified official

Rösti Threat Intel MCP

v0.2.1 changelog · 1

dev.rosti/rosti

Look up IOCs and search threat-intel reports, YARA rules, MITRE ATT&CK ids and CVEs from rosti.dev

transport:streamable-http tools:11

Target client

run in your project directory

claude mcp add --transport http rosti https://mcp.rosti.dev/mcp

setup guides: Claude Code Claude Desktop Cursor VS Code Zed Windsurf Cline Gemini CLI Grok ChatGPT Claude.ai LangChain

Adds it for this project only. Append --scope user to make it available everywhere. Claude Code docs

lookup_iocs Read-only

lookup iocs

lookup_ioc Read-only

lookup ioc

search_iocs Read-only

search iocs

search_reports Read-only

search reports

get_report Read-only

get report

list_report_iocs Read-only

list report iocs

get_yara_rules Read-only

get yara rules

find_related_reports Read-only

find related reports

get_export_link Read-only

get export link

list_sources Read-only

list sources

describe_taxonomy Read-only

describe taxonomy

All 11 tools, one page each

Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. Check the server's own documentation before granting access.