back to threat intel MCP Search · TI-Mindmap-HubLive gateway to the 1,628+ reports and 25 MCP tools on ti-mindmap-hub.com . Search reports, CVEs, IOCs, briefings, and STIX bundles - all via MCP — with the full per-tool reference (names, descriptions, parameters) below.
MCP key not set - search and report loading are disabled Open the MCP pill in the top-right of the header to paste your key from ti-mindmap-hub.com/settings.
Connect to TI-Mindmap-HUB
Most features need an API key from ti-mindmap-hub.com . Get one free from My Profile → MCP Server API Keys.
TI-Mindmap-Hub Search via MCP · 25 tools Add your TI-Mindmap-Hub API key in the page header to enable search. Keys stay in your browser (localStorage).
Tool Name Description Parameters
list_reportsList available threat intelligence reports with optional filters. Returns title, summary, source, date, tags, and direct link to each report. search(optional) tags(optional) source(optional) time_range(optional) : 24h · 7d · 30d · 90d limit(optional) get_report_detailsRetrieve complete details of a specific report including title, content, source, publication date, tags, and links to all processed content. get_report_contentRetrieve specific content from a report such as AI summary, mindmap, TTPs, IOCs, or STIX bundle. report_id(required) content_type(optional) : summary · raw · mindmap · ttps_table · ttps_execution · five_whats · stix · iocs get_available_sourcesGet the list of all available threat intelligence sources monitored by the platform. None get_available_tagsGet the list of all available tags for filtering reports. None submit_articleSubmit a URL for ingestion — the platform extracts IOCs, TTPs, CVEs, and malware families and generates the mindmap, summary, and STIX bundle. get_statisticsPlatform-wide statistics — total reports, IOCs, CVEs, briefings, and monitored source count. None search_iocSearch an IOC (IP, hash, domain, URL) across all reports. Returns matching reports, IOC type, and first/last seen dates. search_cveLook up a specific CVE — CVSS, severity, EPSS, KEV exploitation status, description, affected products, and references. search_cves_by_keywordKeyword search across the CVE database. Returns matching CVEs with severity, CVSS, and exploitation flags. query(required) limit(optional) list_cvesPaginated list of all CVEs. Filter by severity; sort by CVSS or date. severity(optional) : critical · high · medium · low sort(optional) : cvss · date limit(optional) offset(optional) get_cves_by_articleRetrieve all CVEs associated with a specific article/report. get_cve_statisticsCVE statistics — total count, severity distribution, top vendors, exploitation count, average CVSS, and monthly trend. None list_briefingsList daily and weekly threat intelligence briefings with summaries. get_latest_briefingFetch the most recent daily or weekly briefing. type(optional) : daily · weekly get_briefing_by_dateRetrieve a specific briefing by date. date(required) type(optional) : daily · weekly list_stix_bundlesList available STIX 2.1 bundles with object counts and creation dates. get_stix_bundleDownload a full STIX 2.1 bundle by article ID for import into OpenCTI, MISP, or other CTI platforms. get_stix_statisticsSTIX statistics — total bundles, total objects, and distribution by STIX object type. None kg_searchSearch the STIX constellation knowledge graph for entities by name or alias. Filter by entity type. query(required) entity_type(optional) limit(optional) kg_clusterExpand a knowledge-graph entity to its local neighborhood — related entities and relationships at configurable depth. entity_id(required) depth(optional) kg_timelineBuild a chronological timeline of reports mentioning a specific entity. kg_attack_pathFind attack paths between entities via TTP relationships. source_id(required) target_id(required) kg_cross_reportFind shared entities between two reports — useful for linking campaigns and actor infrastructure. report_id_a(required) report_id_b(required) kg_statsKnowledge-graph statistics — total entities, relationships, entity-type distribution, and relationship-type distribution. None Endpoint: https://mcp.ti-mindmap-hub.com/mcp · Auth: X-API-Key header (free key at ti-mindmap-hub.com → My Profile → MCP Server API Keys). This site proxies calls via /api/v1/mcp/proxy to avoid CORS.