Filigran

Filigran OpenCTI MCP server

Filigran OpenCTI MCP server

Filigran OpenCTI MCP server

for Claude, ChatGPT, Cursor and your own agents

for Claude, ChatGPT, Cursor and your own agents

for Claude, ChatGPT, Cursor and your own agents

Expose Filigran OpenCTI to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesnโ€™t ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.

Expose Filigran OpenCTI to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesnโ€™t ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.

27

operation

s

available

Complete and up-to-date endpoint coverage by Mindflow.

Other services from this vendor:

27

operation

s

available

Complete and up-to-date endpoint coverage by Mindflow.

Other services from this vendor:

27

operation

s

available

Complete and up-to-date endpoint coverage by Mindflow.

Other services from this vendor:

Our customers scale automation with security built in.

Tools exposed by this MCP server

Every Filigran OpenCTI operation, as an MCP tool

Every Filigran OpenCTI operation, as an MCP tool

Each API operation becomes a tool your AI client can call. You decide which ones: allow reads, require approval before sensitive writes and block the rest. A few of the most used:

  • Filigran OpenCTI

    Filigran OpenCTI

    Add indicator relation

    Add indicator relation

  • Filigran OpenCTI

    Filigran OpenCTI

    Create incident

    Create incident

  • Filigran OpenCTI

    Filigran OpenCTI

    Create indicator

    Create indicator

  • Filigran OpenCTI

    Filigran OpenCTI

    Create malware

    Create malware

  • Filigran OpenCTI

    Filigran OpenCTI

    Create observable

    Create observable

  • Filigran OpenCTI

    Filigran OpenCTI

    Delete case incident

    Delete case incident

  • Filigran OpenCTI

    Filigran OpenCTI

    Delete indicator

    Delete indicator

  • Filigran OpenCTI

    Filigran OpenCTI

    Edit incident

    Edit incident

  • Filigran OpenCTI

    Filigran OpenCTI

    Edit observable

    Edit observable

  • Filigran OpenCTI

    Filigran OpenCTI

    Get about information

    Get about information

  • Filigran OpenCTI

    Filigran OpenCTI

    Get stix object

    Get stix object

  • Filigran OpenCTI

    Filigran OpenCTI

    List incidents

    List incidents

  • Filigran OpenCTI

    Filigran OpenCTI

    List indicators

    List indicators

  • Filigran OpenCTI

    Filigran OpenCTI

    List malware

    List malware

  • Filigran OpenCTI

    Filigran OpenCTI

    Update indicator

    Update indicator

  • Filigran OpenCTI

    Filigran OpenCTI

    Upload import file

    Upload import file

  • Filigran OpenCTI

    Add indicator relation

  • Filigran OpenCTI

    Create incident

  • Filigran OpenCTI

    Create indicator

  • Filigran OpenCTI

    Create malware

  • Filigran OpenCTI

    Create observable

  • Filigran OpenCTI

    Delete case incident

  • Filigran OpenCTI

    Delete indicator

  • Filigran OpenCTI

    Edit incident

  • Filigran OpenCTI

    Edit observable

  • Filigran OpenCTI

    Get about information

  • Filigran OpenCTI

    Get stix object

  • Filigran OpenCTI

    List incidents

  • Filigran OpenCTI

    List indicators

  • Filigran OpenCTI

    List malware

  • Filigran OpenCTI

    Update indicator

  • Filigran OpenCTI

    Upload import file

  • Filigran OpenCTI

    Filigran OpenCTI

    Upload import file

    Upload import file

  • Filigran OpenCTI

    Filigran OpenCTI

    Update indicator

    Update indicator

  • Filigran OpenCTI

    Filigran OpenCTI

    List malware

    List malware

  • Filigran OpenCTI

    Filigran OpenCTI

    List indicators

    List indicators

  • Filigran OpenCTI

    Filigran OpenCTI

    List incidents

    List incidents

  • Filigran OpenCTI

    Filigran OpenCTI

    Get stix object

    Get stix object

  • Filigran OpenCTI

    Filigran OpenCTI

    Get about information

    Get about information

  • Filigran OpenCTI

    Filigran OpenCTI

    Edit observable

    Edit observable

  • Filigran OpenCTI

    Filigran OpenCTI

    Edit incident

    Edit incident

  • Filigran OpenCTI

    Filigran OpenCTI

    Delete indicator

    Delete indicator

  • Filigran OpenCTI

    Filigran OpenCTI

    Delete case incident

    Delete case incident

  • Filigran OpenCTI

    Filigran OpenCTI

    Create observable

    Create observable

  • Filigran OpenCTI

    Filigran OpenCTI

    Create malware

    Create malware

  • Filigran OpenCTI

    Filigran OpenCTI

    Create indicator

    Create indicator

  • Filigran OpenCTI

    Filigran OpenCTI

    Create incident

    Create incident

  • Filigran OpenCTI

    Filigran OpenCTI

    Add indicator relation

    Add indicator relation

  • Filigran OpenCTI

    Upload import file

  • Filigran OpenCTI

    Update indicator

  • Filigran OpenCTI

    List malware

  • Filigran OpenCTI

    List indicators

  • Filigran OpenCTI

    List incidents

  • Filigran OpenCTI

    Get stix object

  • Filigran OpenCTI

    Get about information

  • Filigran OpenCTI

    Edit observable

  • Filigran OpenCTI

    Edit incident

  • Filigran OpenCTI

    Delete indicator

  • Filigran OpenCTI

    Delete case incident

  • Filigran OpenCTI

    Create observable

  • Filigran OpenCTI

    Create malware

  • Filigran OpenCTI

    Create indicator

  • Filigran OpenCTI

    Create incident

  • Filigran OpenCTI

    Add indicator relation

Connect Filigran OpenCTI to your AI client in three steps.

01

Connect the service

Add Filigran OpenCTI in Mindflow with its credentials. They stay in Mindflow and never reach the AI client.

02

Choose the tools

Pick the operations each AI client may call. Allow reads, require approval before sensitive writes and block the rest.

03

Connect your AI client

Point Claude, ChatGPT, Cursor or your own agent to your MCP Gateway endpoint, then check real calls in the audit log.

Use cases

Use cases

What your AI agents can do with Filigran OpenCTI

What your AI agents can do with Filigran OpenCTI

AI clients

Mindflow

Filigran OpenCTI

โ†’ Automate incident reporting pain points by triggering the creation and updating of case incidents directly from threat detection outputs, ensuring timely escalation and detailed record-keeping.  โ†’ Streamline indicator enrichment challenges by automating updates and relation additions, enabling continuous refinement of threat indicators without manual intervention.  โ†’ Enhance threat actor and campaign tracking by automating the retrieval and listing of related threat intelligence objects, improving situational awareness and historical analysis.

โ†’ Automate incident reporting pain points by triggering the creation and updating of case incidents directly from threat detection outputs, ensuring timely escalation and detailed record-keeping.  โ†’ Streamline indicator enrichment challenges by automating updates and relation additions, enabling continuous refinement of threat indicators without manual intervention.  โ†’ Enhance threat actor and campaign tracking by automating the retrieval and listing of related threat intelligence objects, improving situational awareness and historical analysis.

More

More

Filigran

Filigran

MCP servers:

MCP servers:

Every call goes through one governed endpoint.

Every call goes through one governed endpoint.

Your AI clients get access. You keep control.

Your AI clients get access. You keep control.

Every call to Filigran OpenCTI goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.

Every call to Filigran OpenCTI goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.

Filigran OpenCTI MCP server

Live

RBAC ยท SecOps

Scoped credentials

Audit log

Add indicator relation

Allowed

Create incident

Allowed

Create indicator

Needs approval

Create malware

Blocked

Every call logged ยท Export to SIEM

Put this MCP server to work.

Bring one AI client and the tools it needs. Weโ€™ll show you the setup in Mindflow, from scoped access to the audit log.

Put this MCP server to work.

Bring one AI client and the tools it needs. Weโ€™ll show you the setup in Mindflow, from scoped access to the audit log.

Less busywork. More possibility.

Let your agents handle the routine. Make room for what comes next.

Automation intelligence, delivered monthly.

Product releases, automation playbooks, and security research โ€” straight to your inbox. No spam, unsubscribe anytime.

ยฉ 2026 Mindflow โ€” All rights reserved.

SOC 2 Type II
ISO 27001
GDPR
France 2030
Bpifrance
รŽle-de-France

Less busywork. More possibility.

Let your agents handle the routine. Make room for what comes next.

Automation intelligence, delivered monthly.

Product releases, automation playbooks, and security research โ€” straight to your inbox. No spam, unsubscribe anytime.

ยฉ 2026 Mindflow โ€” All rights reserved.

SOC 2 Type II
ISO 27001
GDPR
France 2030
Bpifrance
รŽle-de-France

Less busywork. More possibility.

Let your agents handle the routine. Make room for what comes next.

Automation intelligence, delivered monthly.

Product releases, automation playbooks, and security research โ€” straight to your inbox. No spam, unsubscribe anytime.

ยฉ 2026 Mindflow โ€” All rights reserved.

SOC 2 Type II
ISO 27001
GDPR
France 2030
Bpifrance
รŽle-de-France