TheHive
TheHive MCP server
TheHive MCP server
TheHive MCP server
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
TheHive MCP server
TheHive MCP server
TheHive MCP server
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
Expose TheHive to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesn’t ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.
Expose TheHive to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesn’t ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.
183
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.
Other services from this vendor:
183
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.
Other services from this vendor:
183
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.
Other services from this vendor:
Our customers scale automation with security built in.
Tools exposed by this MCP server
Every TheHive operation, as an MCP tool
Every TheHive operation, as an MCP tool
Each API operation becomes a tool your AI client can call. You decide which ones: allow reads, require approval before sensitive writes and block the rest. A few of the most used:
TheHive
TheHive
Create alert
Create alert
TheHive
TheHive
Create case
Create case
TheHive
TheHive
Create observable in case
Create observable in case
TheHive
TheHive
Create task in case
Create task in case
TheHive
TheHive
Delete alert
Delete alert
TheHive
TheHive
Delete case
Delete case
TheHive
TheHive
Get alert
Get alert
TheHive
TheHive
Get case
Get case
TheHive
TheHive
Get current user info
Get current user info
TheHive
TheHive
Get observable
Get observable
TheHive
TheHive
Get platform status
Get platform status
TheHive
TheHive
Get task
Get task
TheHive
TheHive
Login
Login
TheHive
TheHive
Query api
Query api
TheHive
TheHive
Search
Search
TheHive
TheHive
Update alert
Update alert
TheHive
Create alert
TheHive
Create case
TheHive
Create observable in case
TheHive
Create task in case
TheHive
Delete alert
TheHive
Delete case
TheHive
Get alert
TheHive
Get case
TheHive
Get current user info
TheHive
Get observable
TheHive
Get platform status
TheHive
Get task
TheHive
Login
TheHive
Query api
TheHive
Search
TheHive
Update alert
TheHive
TheHive
Update case
Update case
TheHive
TheHive
Update alert
Update alert
TheHive
TheHive
Search
Search
TheHive
TheHive
Query api
Query api
TheHive
TheHive
Login
Login
TheHive
TheHive
Get task
Get task
TheHive
TheHive
Get platform status
Get platform status
TheHive
TheHive
Get observable
Get observable
TheHive
TheHive
Get current user info
Get current user info
TheHive
TheHive
Get case
Get case
TheHive
TheHive
Get alert
Get alert
TheHive
TheHive
Delete case
Delete case
TheHive
TheHive
Delete alert
Delete alert
TheHive
TheHive
Create task in case
Create task in case
TheHive
TheHive
Create observable in case
Create observable in case
TheHive
TheHive
Create case
Create case
TheHive
Update case
TheHive
Update alert
TheHive
Search
TheHive
Query api
TheHive
Login
TheHive
Get task
TheHive
Get platform status
TheHive
Get observable
TheHive
Get current user info
TheHive
Get case
TheHive
Get alert
TheHive
Delete case
TheHive
Delete alert
TheHive
Create task in case
TheHive
Create observable in case
TheHive
Create case
Connect TheHive to your AI client in three steps.
01
Connect the service
Add TheHive in Mindflow with its credentials. They stay in Mindflow and never reach the AI client.
02
Choose the tools
Pick the operations each AI client may call. Allow reads, require approval before sensitive writes and block the rest.
03
Connect your AI client
Point Claude, ChatGPT, Cursor or your own agent to your MCP Gateway endpoint, then check real calls in the audit log.
Use cases
Use cases
What your AI agents can do with TheHive
What your AI agents can do with TheHive
AI clients
Mindflow
TheHive
→ Automate incident case creation by converting security alerts into TheHive cases, leveraging API calls to reduce manual entry and accelerate response time. → Streamline observables management by merging similar indicators within cases using AI-driven decision-making to maintain case accuracy and relevance. → Enhance collaboration and context enrichment by automatically adding comments, attachments, and custom events to cases, consolidating investigation data for analysts.
→ Automate incident case creation by converting security alerts into TheHive cases, leveraging API calls to reduce manual entry and accelerate response time. → Streamline observables management by merging similar indicators within cases using AI-driven decision-making to maintain case accuracy and relevance. → Enhance collaboration and context enrichment by automatically adding comments, attachments, and custom events to cases, consolidating investigation data for analysts.
More
More
TheHive
TheHive
MCP servers:
MCP servers:
Every call goes through one governed endpoint.
Every call goes through one governed endpoint.
Your AI clients get access. You keep control.
Your AI clients get access. You keep control.
Every call to TheHive goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.
Every call to TheHive goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.
TheHive MCP server
Live
RBAC · SecOps
Scoped credentials
Audit log
Create alert
Allowed
Create case
Allowed
Create observable in case
Needs approval
Create task in case
Blocked
Every call logged · Export to SIEM
Questions about the TheHive MCP server
Clear answers before you connect an AI client.
Questions about the TheHive MCP server
Clear answers before you connect an AI client.
Explore more MCP servers in our catalog of 4,000+ services.
Put this MCP server to work.
Bring one AI client and the tools it needs. We’ll show you the setup in Mindflow, from scoped access to the audit log.
Put this MCP server to work.
Bring one AI client and the tools it needs. We’ll show you the setup in Mindflow, from scoped access to the audit log.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research — straight to your inbox. No spam, unsubscribe anytime.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research — straight to your inbox. No spam, unsubscribe anytime.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research — straight to your inbox. No spam, unsubscribe anytime.