
Cofense
Cofense MCP server
Cofense MCP server
Cofense MCP server
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
Cofense MCP server
Cofense MCP server
Cofense MCP server
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
Expose Cofense to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesnโt ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.
Expose Cofense to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesnโt ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.

17
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.

17
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.

17
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.
Our customers scale automation with security built in.
Tools exposed by this MCP server
Every Cofense operation, as an MCP tool
Every Cofense operation, as an MCP tool
Each API operation becomes a tool your AI client can call. You decide which ones: allow reads, require approval before sensitive writes and block the rest. A few of the most used:

Cofense
Cofense
Create a threat indicator
Create a threat indicator

Cofense
Cofense
Get attachment by id
Get attachment by id

Cofense
Cofense
Get cluster by id
Get cluster by id

Cofense
Cofense
Get domain by id
Get domain by id

Cofense
Cofense
Get executive summary
Get executive summary

Cofense
Cofense
Get hostname by id
Get hostname by id

Cofense
Cofense
Get intelligence indicator
Get intelligence indicator

Cofense
Cofense
Get report details by id
Get report details by id

Cofense
Cofense
Get url by id
Get url by id

Cofense
Cofense
List all attachments
List all attachments

Cofense
Cofense
List all clusters
List all clusters

Cofense
Cofense
List all domains
List all domains

Cofense
Cofense
List all hostnames
List all hostnames

Cofense
Cofense
List all reports
List all reports

Cofense
Cofense
List all urls
List all urls

Cofense
Create a threat indicator

Cofense
Get attachment by id

Cofense
Get cluster by id

Cofense
Get domain by id

Cofense
Get executive summary

Cofense
Get hostname by id

Cofense
Get intelligence indicator

Cofense
Get report details by id

Cofense
Get url by id

Cofense
List all attachments

Cofense
List all clusters

Cofense
List all domains

Cofense
List all hostnames

Cofense
List all reports

Cofense
List all urls

Cofense
Cofense
List all urls
List all urls

Cofense
Cofense
List all reports
List all reports

Cofense
Cofense
List all hostnames
List all hostnames

Cofense
Cofense
List all domains
List all domains

Cofense
Cofense
List all clusters
List all clusters

Cofense
Cofense
List all attachments
List all attachments

Cofense
Cofense
Get url by id
Get url by id

Cofense
Cofense
Get report details by id
Get report details by id

Cofense
Cofense
Get intelligence indicator
Get intelligence indicator

Cofense
Cofense
Get hostname by id
Get hostname by id

Cofense
Cofense
Get executive summary
Get executive summary

Cofense
Cofense
Get domain by id
Get domain by id

Cofense
Cofense
Get cluster by id
Get cluster by id

Cofense
Cofense
Get attachment by id
Get attachment by id

Cofense
Cofense
Create a threat indicator
Create a threat indicator

Cofense
List all urls

Cofense
List all reports

Cofense
List all hostnames

Cofense
List all domains

Cofense
List all clusters

Cofense
List all attachments

Cofense
Get url by id

Cofense
Get report details by id

Cofense
Get intelligence indicator

Cofense
Get hostname by id

Cofense
Get executive summary

Cofense
Get domain by id

Cofense
Get cluster by id

Cofense
Get attachment by id

Cofense
Create a threat indicator
Connect Cofense to your AI client in three steps.
01
Connect the service
Add Cofense in Mindflow with its credentials. They stay in Mindflow and never reach the AI client.
02
Choose the tools
Pick the operations each AI client may call. Allow reads, require approval before sensitive writes and block the rest.
03
Connect your AI client
Point Claude, ChatGPT, Cursor or your own agent to your MCP Gateway endpoint, then check real calls in the audit log.
Use cases
Use cases
What your AI agents can do with Cofense
What your AI agents can do with Cofense
AI clients
Mindflow

Cofense
โ Rapidly identify and track phishing campaign clusters by automatically listing and retrieving detailed cluster data to enhance incident response efforts โ Automatically update and create threat indicators by ingesting real-time Cofense intelligence, streamlining threat detection workflows โ Enrich domain and URL threat intelligence through continuous extraction of domain and URL information to strengthen perimeter defenses
โ Rapidly identify and track phishing campaign clusters by automatically listing and retrieving detailed cluster data to enhance incident response efforts โ Automatically update and create threat indicators by ingesting real-time Cofense intelligence, streamlining threat detection workflows โ Enrich domain and URL threat intelligence through continuous extraction of domain and URL information to strengthen perimeter defenses
Every call goes through one governed endpoint.
Every call goes through one governed endpoint.
Your AI clients get access. You keep control.
Your AI clients get access. You keep control.
Every call to Cofense goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.
Every call to Cofense goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.

Cofense MCP server
Live
RBAC ยท SecOps
Scoped credentials
Audit log

Create a threat indicator
Allowed

Get attachment by id
Allowed

Get cluster by id
Needs approval

Get domain by id
Blocked
Every call logged ยท Export to SIEM
Questions about the Cofense MCP server
Clear answers before you connect an AI client.
Questions about the Cofense MCP server
Clear answers before you connect an AI client.
Explore more MCP servers in our catalog of 4,000+ services.
Put this MCP server to work.
Bring one AI client and the tools it needs. Weโll show you the setup in Mindflow, from scoped access to the audit log.
Put this MCP server to work.
Bring one AI client and the tools it needs. Weโll show you the setup in Mindflow, from scoped access to the audit log.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research โ straight to your inbox. No spam, unsubscribe anytime.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research โ straight to your inbox. No spam, unsubscribe anytime.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research โ straight to your inbox. No spam, unsubscribe anytime.