OT Intel API MCP Tools
OT Intel API exposes 40 tools. Each one has its own page with the configuration for every client that can run this server.
-
getCveTriageget cve triage
-
getDeviceExposureget device exposure
-
getThreatActorget threat actor
-
getActorsBySectorget actors by sector
-
getIocEnrichmentget ioc enrichment
-
getAdvisoriesget advisories
-
getPatchFeasibilityget patch feasibility
-
getAssetExposureget asset exposure
-
getCampaignsget campaigns
-
getSectorDeltaget sector delta
-
getMalwareProfileget malware profile
-
getSectorBriefget sector brief
-
getAsnProfileget asn profile
-
getDetectionArtifactsget detection artifacts
-
getComplianceMappingget compliance mapping
-
getComplianceBatchget compliance batch
-
getThreatScoreget threat score
-
getPrecursorTtpget precursor ttp
-
getRootCauseLocalizationget root cause localization
-
getThreatHuntControlLoopget threat hunt control loop
-
getInvariantReachabilityget invariant reachability
-
getVendorRiskget vendor risk
-
getRiskExposureget risk exposure
-
getActionConformanceget action conformance
-
getAiExposureget ai exposure
-
getAiUpliftget ai uplift
-
getAiAttackFeasibilityget ai attack feasibility
-
getClaimReliabilityget claim reliability
-
getStixCoverageget stix coverage
-
getMitigationMapget mitigation map
-
getActorReportget actor report
-
getActorDossierget actor dossier
-
getSectorSitrepget sector sitrep
-
getCtiArticleget cti article
-
getLinkedinPostget linkedin post
-
getXThreadget xthread
-
getAnalystBriefget analyst brief
-
getVendorRiskDeltaget vendor risk delta
-
submitSightingsubmit sighting
-
getGccBulletinget gcc bulletin
This list was read from the server itself, by connecting to it and calling tools/list on 20 October 2026. It is what
the server actually exposes, not what its listing claims.
Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. The registry stores tool names only; connect the server for its live schemas.