Cisco
Cisco Umbrella Investigate MCP server
Cisco Umbrella Investigate MCP server
Cisco Umbrella Investigate MCP server
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
Cisco Umbrella Investigate MCP server
Cisco Umbrella Investigate MCP server
Cisco Umbrella Investigate MCP server
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
Expose Cisco Umbrella Investigate to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesn’t ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.
Expose Cisco Umbrella Investigate to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesn’t ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.
28
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.
Other services from this vendor:
Cisco Armorblox
Cisco Business Critical Services Insights
Cisco Catalyst Platform
Cisco CDO
Cisco Cloudlock
Cisco Duo Security
Cisco Inspect
Cisco IROH Profile Service
Cisco IROH Webhook
Cisco IROH-INT Enrich
Cisco IROH-INT Response
Cisco IROH-SSE
Cisco ISE ERS
Cisco Notification
Cisco Orbital
Cisco Secure Access Deployments
Cisco Secure Access Key Administration
Cisco Secure Access Policies
Cisco Secure Access Reports
Cisco Secure Access Token
Cisco Secure Cloud Analytics
Cisco Secure Computers
Cisco Secure Device Control
Cisco Secure Email
Cisco Secure Endpoint
Cisco Secure Exclusions
Cisco Secure Indicators of Compromise
Cisco Secure Organizations
Cisco Secure Policies
Cisco Security Open Vulnerabilities
Cisco Duo Security
Cisco Inspect
Cisco IROH Profile Service
Cisco IROH Webhook
Cisco IROH-INT Enrich
Cisco IROH-INT Response
Cisco IROH-SSE
Cisco ISE ERS
Cisco Notification
Cisco Orbital
Cisco Secure Access Deployments
Cisco Secure Access Key Administration
Cisco Secure Access Policies
Cisco Secure Access Reports
Cisco Secure Access Token
Cisco Secure Cloud Analytics
Cisco Secure Computers
Cisco Secure Device Control
Cisco Secure Email
Cisco Secure Endpoint
Cisco Secure Exclusions
Cisco Secure Indicators of Compromise
Cisco Secure Organizations
Cisco Secure Policies
Cisco Security Open Vulnerabilities
Cisco Talos Intelligence
Cisco Telemetry
Cisco ThreatGrid
Cisco Token
Cisco Umbrella Administration
Cisco IROH-INT Response
Cisco IROH-SSE
Cisco ISE ERS
Cisco Notification
Cisco Orbital
Cisco Secure Access Deployments
Cisco Secure Access Key Administration
Cisco Secure Access Policies
Cisco Secure Access Reports
Cisco Secure Access Token
Cisco Secure Cloud Analytics
Cisco Secure Computers
Cisco Secure Device Control
Cisco Secure Email
Cisco Secure Endpoint
Cisco Secure Exclusions
Cisco Secure Indicators of Compromise
Cisco Secure Organizations
Cisco Secure Policies
Cisco Security Open Vulnerabilities
Cisco Talos Intelligence
Cisco Telemetry
Cisco ThreatGrid
Cisco Token
Cisco Umbrella Administration
Cisco Umbrella Deployments
Cisco Umbrella Policies
Cisco Umbrella Reports
Cisco Umbrella-Cisco
Cisco-Umbrella
Cisco Secure Access Deployments
Cisco Secure Access Key Administration
Cisco Secure Access Policies
Cisco Secure Access Reports
Cisco Secure Access Token
Cisco Secure Cloud Analytics
Cisco Secure Computers
Cisco Secure Device Control
Cisco Secure Email
Cisco Secure Endpoint
Cisco Secure Exclusions
Cisco Secure Indicators of Compromise
Cisco Secure Organizations
Cisco Secure Policies
Cisco Security Open Vulnerabilities
Cisco Talos Intelligence
Cisco Telemetry
Cisco ThreatGrid
Cisco Token
Cisco Umbrella Administration
Cisco Umbrella Deployments
Cisco Umbrella Policies
Cisco Umbrella Reports
Cisco Umbrella-Cisco
Cisco-Umbrella
Duo Network Gateway
Meraki Dashboard
28
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.
Other services from this vendor:
Cisco Armorblox
Cisco Business Critical Services Insights
Cisco Catalyst Platform
Cisco CDO
Cisco Cloudlock
Cisco Duo Security
Cisco Inspect
Cisco IROH Profile Service
Cisco IROH Webhook
Cisco IROH-INT Enrich
Cisco IROH-INT Response
Cisco IROH-SSE
Cisco ISE ERS
Cisco Notification
Cisco Orbital
Cisco Secure Access Deployments
Cisco Secure Access Key Administration
Cisco Secure Access Policies
Cisco Secure Access Reports
Cisco Secure Access Token
Cisco Secure Cloud Analytics
Cisco Secure Computers
Cisco Secure Device Control
Cisco Secure Email
Cisco Secure Endpoint
Cisco Secure Exclusions
Cisco Secure Indicators of Compromise
Cisco Secure Organizations
Cisco Secure Policies
Cisco Security Open Vulnerabilities
Cisco Duo Security
Cisco Inspect
Cisco IROH Profile Service
Cisco IROH Webhook
Cisco IROH-INT Enrich
Cisco IROH-INT Response
Cisco IROH-SSE
Cisco ISE ERS
Cisco Notification
Cisco Orbital
Cisco Secure Access Deployments
Cisco Secure Access Key Administration
Cisco Secure Access Policies
Cisco Secure Access Reports
Cisco Secure Access Token
Cisco Secure Cloud Analytics
Cisco Secure Computers
Cisco Secure Device Control
Cisco Secure Email
Cisco Secure Endpoint
Cisco Secure Exclusions
Cisco Secure Indicators of Compromise
Cisco Secure Organizations
Cisco Secure Policies
Cisco Security Open Vulnerabilities
Cisco Talos Intelligence
Cisco Telemetry
Cisco ThreatGrid
Cisco Token
Cisco Umbrella Administration
Cisco IROH-INT Response
Cisco IROH-SSE
Cisco ISE ERS
Cisco Notification
Cisco Orbital
Cisco Secure Access Deployments
Cisco Secure Access Key Administration
Cisco Secure Access Policies
Cisco Secure Access Reports
Cisco Secure Access Token
Cisco Secure Cloud Analytics
Cisco Secure Computers
Cisco Secure Device Control
Cisco Secure Email
Cisco Secure Endpoint
Cisco Secure Exclusions
Cisco Secure Indicators of Compromise
Cisco Secure Organizations
Cisco Secure Policies
Cisco Security Open Vulnerabilities
Cisco Talos Intelligence
Cisco Telemetry
Cisco ThreatGrid
Cisco Token
Cisco Umbrella Administration
Cisco Umbrella Deployments
Cisco Umbrella Policies
Cisco Umbrella Reports
Cisco Umbrella-Cisco
Cisco-Umbrella
Cisco Secure Access Deployments
Cisco Secure Access Key Administration
Cisco Secure Access Policies
Cisco Secure Access Reports
Cisco Secure Access Token
Cisco Secure Cloud Analytics
Cisco Secure Computers
Cisco Secure Device Control
Cisco Secure Email
Cisco Secure Endpoint
Cisco Secure Exclusions
Cisco Secure Indicators of Compromise
Cisco Secure Organizations
Cisco Secure Policies
Cisco Security Open Vulnerabilities
Cisco Talos Intelligence
Cisco Telemetry
Cisco ThreatGrid
Cisco Token
Cisco Umbrella Administration
Cisco Umbrella Deployments
Cisco Umbrella Policies
Cisco Umbrella Reports
Cisco Umbrella-Cisco
Cisco-Umbrella
Duo Network Gateway
Meraki Dashboard
28
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.
Other services from this vendor:
Cisco Armorblox
Cisco Business Critical Services Insights
Cisco Catalyst Platform
Cisco CDO
Cisco Cloudlock
Cisco Duo Security
Cisco Inspect
Cisco IROH Profile Service
Cisco IROH Webhook
Cisco IROH-INT Enrich
Cisco IROH-INT Response
Cisco IROH-SSE
Cisco ISE ERS
Cisco Notification
Cisco Orbital
Cisco Secure Access Deployments
Cisco Secure Access Key Administration
Cisco Secure Access Policies
Cisco Secure Access Reports
Cisco Secure Access Token
Cisco Secure Cloud Analytics
Cisco Secure Computers
Cisco Secure Device Control
Cisco Secure Email
Cisco Secure Endpoint
Cisco Secure Exclusions
Cisco Secure Indicators of Compromise
Cisco Secure Organizations
Cisco Secure Policies
Cisco Security Open Vulnerabilities
Cisco Duo Security
Cisco Inspect
Cisco IROH Profile Service
Cisco IROH Webhook
Cisco IROH-INT Enrich
Cisco IROH-INT Response
Cisco IROH-SSE
Cisco ISE ERS
Cisco Notification
Cisco Orbital
Cisco Secure Access Deployments
Cisco Secure Access Key Administration
Cisco Secure Access Policies
Cisco Secure Access Reports
Cisco Secure Access Token
Cisco Secure Cloud Analytics
Cisco Secure Computers
Cisco Secure Device Control
Cisco Secure Email
Cisco Secure Endpoint
Cisco Secure Exclusions
Cisco Secure Indicators of Compromise
Cisco Secure Organizations
Cisco Secure Policies
Cisco Security Open Vulnerabilities
Cisco Talos Intelligence
Cisco Telemetry
Cisco ThreatGrid
Cisco Token
Cisco Umbrella Administration
Cisco IROH-INT Response
Cisco IROH-SSE
Cisco ISE ERS
Cisco Notification
Cisco Orbital
Cisco Secure Access Deployments
Cisco Secure Access Key Administration
Cisco Secure Access Policies
Cisco Secure Access Reports
Cisco Secure Access Token
Cisco Secure Cloud Analytics
Cisco Secure Computers
Cisco Secure Device Control
Cisco Secure Email
Cisco Secure Endpoint
Cisco Secure Exclusions
Cisco Secure Indicators of Compromise
Cisco Secure Organizations
Cisco Secure Policies
Cisco Security Open Vulnerabilities
Cisco Talos Intelligence
Cisco Telemetry
Cisco ThreatGrid
Cisco Token
Cisco Umbrella Administration
Cisco Umbrella Deployments
Cisco Umbrella Policies
Cisco Umbrella Reports
Cisco Umbrella-Cisco
Cisco-Umbrella
Cisco Secure Access Deployments
Cisco Secure Access Key Administration
Cisco Secure Access Policies
Cisco Secure Access Reports
Cisco Secure Access Token
Cisco Secure Cloud Analytics
Cisco Secure Computers
Cisco Secure Device Control
Cisco Secure Email
Cisco Secure Endpoint
Cisco Secure Exclusions
Cisco Secure Indicators of Compromise
Cisco Secure Organizations
Cisco Secure Policies
Cisco Security Open Vulnerabilities
Cisco Talos Intelligence
Cisco Telemetry
Cisco ThreatGrid
Cisco Token
Cisco Umbrella Administration
Cisco Umbrella Deployments
Cisco Umbrella Policies
Cisco Umbrella Reports
Cisco Umbrella-Cisco
Cisco-Umbrella
Duo Network Gateway
Meraki Dashboard
Our customers scale automation with security built in.
Tools exposed by this MCP server
Every Cisco Umbrella Investigate operation, as an MCP tool
Every Cisco Umbrella Investigate operation, as an MCP tool
Each API operation becomes a tool your AI client can call. You decide which ones: allow reads, require approval before sensitive writes and block the rest. A few of the most used:
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Check status and categorization of domains
Check status and categorization of domains
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get domain status and categorization
Get domain status and categorization
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get domains by search
Get domains by search
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get resource records for domain
Get resource records for domain
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get resource records for ip
Get resource records for ip
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get resource records for name
Get resource records for name
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get risk score for domain
Get risk score for domain
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get samples for domain, ip, or url
Get samples for domain, ip, or url
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get samples for hash
Get samples for hash
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get subdomains for domain
Get subdomains for domain
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get top most seen domains
Get top most seen domains
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get whois email information
Get whois email information
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get whois history for domain
Get whois history for domain
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get whois information for domain
Get whois information for domain
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get whois information for nameservers
Get whois information for nameservers
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get whois information search
Get whois information search
Cisco Umbrella Investigate
Check status and categorization of domains
Cisco Umbrella Investigate
Get domain status and categorization
Cisco Umbrella Investigate
Get domains by search
Cisco Umbrella Investigate
Get resource records for domain
Cisco Umbrella Investigate
Get resource records for ip
Cisco Umbrella Investigate
Get resource records for name
Cisco Umbrella Investigate
Get risk score for domain
Cisco Umbrella Investigate
Get samples for domain, ip, or url
Cisco Umbrella Investigate
Get samples for hash
Cisco Umbrella Investigate
Get subdomains for domain
Cisco Umbrella Investigate
Get top most seen domains
Cisco Umbrella Investigate
Get whois email information
Cisco Umbrella Investigate
Get whois history for domain
Cisco Umbrella Investigate
Get whois information for domain
Cisco Umbrella Investigate
Get whois information for nameservers
Cisco Umbrella Investigate
Get whois information search
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get whois information search
Get whois information search
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get whois information for nameservers
Get whois information for nameservers
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get whois information for domain
Get whois information for domain
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get whois history for domain
Get whois history for domain
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get whois email information
Get whois email information
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get top most seen domains
Get top most seen domains
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get subdomains for domain
Get subdomains for domain
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get samples for hash
Get samples for hash
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get samples for domain, ip, or url
Get samples for domain, ip, or url
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get risk score for domain
Get risk score for domain
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get resource records for name
Get resource records for name
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get resource records for ip
Get resource records for ip
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get resource records for domain
Get resource records for domain
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get domains by search
Get domains by search
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Get domain status and categorization
Get domain status and categorization
Cisco Umbrella Investigate
Cisco Umbrella Investigate
Check status and categorization of domains
Check status and categorization of domains
Cisco Umbrella Investigate
Get whois information search
Cisco Umbrella Investigate
Get whois information for nameservers
Cisco Umbrella Investigate
Get whois information for domain
Cisco Umbrella Investigate
Get whois history for domain
Cisco Umbrella Investigate
Get whois email information
Cisco Umbrella Investigate
Get top most seen domains
Cisco Umbrella Investigate
Get subdomains for domain
Cisco Umbrella Investigate
Get samples for hash
Cisco Umbrella Investigate
Get samples for domain, ip, or url
Cisco Umbrella Investigate
Get risk score for domain
Cisco Umbrella Investigate
Get resource records for name
Cisco Umbrella Investigate
Get resource records for ip
Cisco Umbrella Investigate
Get resource records for domain
Cisco Umbrella Investigate
Get domains by search
Cisco Umbrella Investigate
Get domain status and categorization
Cisco Umbrella Investigate
Check status and categorization of domains
Connect Cisco Umbrella Investigate to your AI client in three steps.
01
Connect the service
Add Cisco Umbrella Investigate in Mindflow with its credentials. They stay in Mindflow and never reach the AI client.
02
Choose the tools
Pick the operations each AI client may call. Allow reads, require approval before sensitive writes and block the rest.
03
Connect your AI client
Point Claude, ChatGPT, Cursor or your own agent to your MCP Gateway endpoint, then check real calls in the audit log.
Use cases
Use cases
What your AI agents can do with Cisco Umbrella Investigate
What your AI agents can do with Cisco Umbrella Investigate
AI clients
Mindflow
Cisco Umbrella Investigate
→ Automate domain risk assessment by retrieving domain categorization and security scores, enabling security teams to prioritize threats using real-time data from Cisco Umbrella Investigate. → Streamline WHOIS and historical domain ownership investigations by automatically gathering detailed WHOIS data and change history to support incident response and digital forensics. → Enhance DNS anomaly detection by collecting and correlating passive DNS resource records for domains and IPs, improving threat detection accuracy through enriched contextual information.
→ Automate domain risk assessment by retrieving domain categorization and security scores, enabling security teams to prioritize threats using real-time data from Cisco Umbrella Investigate. → Streamline WHOIS and historical domain ownership investigations by automatically gathering detailed WHOIS data and change history to support incident response and digital forensics. → Enhance DNS anomaly detection by collecting and correlating passive DNS resource records for domains and IPs, improving threat detection accuracy through enriched contextual information.
More
More
Cisco
Cisco
MCP servers:
MCP servers:
Cisco Armorblox
Cisco Armorblox
Cisco Armorblox
Cisco Business Critical Services Insights
Cisco Business Critical Services Insights
Cisco Business Critical Services Insights
Cisco Catalyst Platform
Cisco Catalyst Platform
Cisco Catalyst Platform
Cisco CDO
Cisco CDO
Cisco CDO
Cisco Cloudlock
Cisco Cloudlock
Cisco Cloudlock
Cisco Duo Security
Cisco Duo Security
Cisco Duo Security
Cisco Inspect
Cisco Inspect
Cisco Inspect
Cisco IROH Profile Service
Cisco IROH Profile Service
Cisco IROH Profile Service
Cisco IROH Webhook
Cisco IROH Webhook
Cisco IROH Webhook
Cisco IROH-INT Enrich
Cisco IROH-INT Enrich
Cisco IROH-INT Enrich
Cisco IROH-INT Response
Cisco IROH-INT Response
Cisco IROH-INT Response
Cisco IROH-SSE
Cisco IROH-SSE
Cisco IROH-SSE
Cisco ISE ERS
Cisco ISE ERS
Cisco ISE ERS
Cisco Notification
Cisco Notification
Cisco Notification
Cisco Orbital
Cisco Orbital
Cisco Orbital
Cisco Secure Access Deployments
Cisco Secure Access Deployments
Cisco Secure Access Deployments
Cisco Secure Access Key Administration
Cisco Secure Access Key Administration
Cisco Secure Access Key Administration
Cisco Secure Access Policies
Cisco Secure Access Policies
Cisco Secure Access Policies
Cisco Secure Access Reports
Cisco Secure Access Reports
Cisco Secure Access Reports
Cisco Secure Access Token
Cisco Secure Access Token
Cisco Secure Access Token
Cisco Secure Cloud Analytics
Cisco Secure Cloud Analytics
Cisco Secure Cloud Analytics
Cisco Secure Computers
Cisco Secure Computers
Cisco Secure Computers
Cisco Secure Device Control
Cisco Secure Device Control
Cisco Secure Device Control
Cisco Secure Email
Cisco Secure Email
Cisco Secure Email
Every call goes through one governed endpoint.
Every call goes through one governed endpoint.
Your AI clients get access. You keep control.
Your AI clients get access. You keep control.
Every call to Cisco Umbrella Investigate goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.
Every call to Cisco Umbrella Investigate goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.
Cisco Umbrella Investigate MCP server
Live
RBAC · SecOps
Scoped credentials
Audit log
Check status and categorization of domains
Allowed
Get domain status and categorization
Allowed
Get domains by search
Needs approval
Get resource records for domain
Blocked
Every call logged · Export to SIEM
Questions about the Cisco Umbrella Investigate MCP server
Clear answers before you connect an AI client.
Questions about the Cisco Umbrella Investigate MCP server
Clear answers before you connect an AI client.
Explore more MCP servers in our catalog of 4,000+ services.
Put this MCP server to work.
Bring one AI client and the tools it needs. We’ll show you the setup in Mindflow, from scoped access to the audit log.
Put this MCP server to work.
Bring one AI client and the tools it needs. We’ll show you the setup in Mindflow, from scoped access to the audit log.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research — straight to your inbox. No spam, unsubscribe anytime.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research — straight to your inbox. No spam, unsubscribe anytime.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research — straight to your inbox. No spam, unsubscribe anytime.