This MCP server provides tooling to interact with an OpenCTI instance via its GraphQL API. It allows you to introspect the GraphQL schema, list available types, and construct/validate queries against your OpenCTI deployment. The server exposes capabilities that help you explore the model context and generate valid queries against the configured OpenCTI instance. Typical usage involves starting the server in a Python virtual environment and then using the included CLI tools or API endpoints to perform introspection, fetch type information, and run example queries against your OpenCTI URL.

Prerequisites:

• Python 3.10 or newer
• Git
• A Python virtual environment tool (venv or similar)

Installation steps:

1. Clone the repository: git clone https://github.com/filigranhq/xtm-mcp.git cd xtm-mcp

2. Create and activate a virtual environment: python -m venv .venv

   On Windows

   ..venv\Scripts\activate

   On macOS/Linux

   source .venv/bin/activate

3. Install dependencies: pip install -r requirements.txt

4. Configure environment (see additional notes for details):

   • Set OPENCTI_URL to your OpenCTI GraphQL endpoint
   • Set OPENCTI_TOKEN to a valid access token if required

5. Run the server: python -m opencti_mcp

6. Optional: run tests or lint as defined in the repository (see development docs in repository).

Environment variables commonly used:

• OPENCTI_URL: The GraphQL endpoint of your OpenCTI instance
• OPENCTI_TOKEN: Authorization token if your OpenCTI instance requires it
• DEBUG or LOG_LEVEL: Adjust verbosity (e.g., DEBUG)

Configuration tips:

• Ensure your OpenCTI instance is reachable from the MCP server host
• If using behind a proxy, configure HTTP_PROXY/HTTPS_PROXY as needed
• The MCP server uses a Python module named opencti_mcp; ensure the module path matches your installation

Common issues:

• ModuleNotFoundError: ensure dependencies are installed via requirements.txt
• Connection errors to OPENCTI_URL; verify URL and network access
• Token authentication failures; verify token validity and scopes