Rösti Threat Intel for Claude.ai

dev.rosti/rosti

Look up IOCs and search threat-intel reports, YARA rules, MITRE ATT&CK ids and CVEs from rosti.dev

client:Claude.ai transport:streamable-http tools:11

Install Rösti Threat Intel in Claude.ai

Settings → Connectors → Add custom connector

https://mcp.rosti.dev/mcp

Claude on the web takes a remote URL and completes OAuth in the browser. For a packaged server use Claude Desktop or Claude Code instead. Claude.ai docs

What Claude.ai can do once it is connected

lookup_iocs
lookup_ioc
search_iocs
search_reports
get_report
list_report_iocs
get_yara_rules
find_related_reports
get_export_link
list_sources
describe_taxonomy

Rösti Threat Intel in other clients

Claude Code
Claude Desktop
Cursor
VS Code
Zed
Windsurf
Cline
Gemini CLI
Grok
ChatGPT
LangChain

Rösti Threat Intel MCP server