Loading...
{
"mcpServers": {
"thehive": {
"command": "/path/to/mcp-server-thehive",
"env": {
"THEHIVE_URL": "https://your-thehive-instance.com:9000/api",
"THEHIVE_API_TOKEN": "your-api-token-here"
}
}
}
}get_thehive_alertsRetrieves a list of alerts from TheHive.
Read-only operation, no data modification.
get_thehive_alert_by_idRetrieves detailed information about a specific alert.
Read-only operation, no data modification.
get_thehive_casesRetrieves a list of cases from TheHive.
Read-only operation, no data modification.
get_thehive_case_by_idRetrieves detailed information about a specific case.
Read-only operation, no data modification.
promote_alert_to_casePromotes an existing alert to a new case.
Creates a new case based on an alert, modifying data.
create_thehive_caseCreates a new case in TheHive.
Creates new data in TheHive.
This server provides a mix of read and write operations on TheHive. It's relatively safe for read-only operations, but promoting alerts or creating cases introduces risk. Secure storage and management of the API token are crucial.