Question 1

What is an MCP Server?

Accepted Answer

An MCP (Model Context Protocol) server acts as a bridge, allowing AI models to access and interact with external data sources and tools. It provides a standardized way for applications to provide context to Large Language Models (LLMs).

Question 2

What is the purpose of the Enrichment MCP Server?

Accepted Answer

The Enrichment MCP Server enhances security data by adding contextual information from third-party services such as VirusTotal, Hybrid Analysis, and AlienVault. This helps security teams identify and respond to threats more effectively.

Question 3

What observable types does the Enrichment MCP Server support?

Accepted Answer

The server supports enrichment for IP addresses, domains, URLs, and email addresses. Support for file hashes (MD5, SHA1, SHA256) is planned for future implementation.

Question 4

Which threat intelligence services are currently supported?

Accepted Answer

Currently supported services include VirusTotal, Hybrid Analysis, AlienVault, Shodan, Urlscan.io, AbuseIPDB, and HaveIBeenPwned.

Question 5

Do I need API keys to use the Enrichment MCP Server?

Accepted Answer

Yes, most of the supported services require API keys. It is highly recommended to store these API keys as environment variables for security.

Question 6

How do I configure the Enrichment MCP Server?

Accepted Answer

The server is configured using a `config.yaml` file, where you can specify which services to use for each observable type and provide the necessary API keys.

Question 7

Where can I find the `config.yaml` file?

Accepted Answer

A sample configuration file (`config.yaml.example`) is provided. You should copy this file, rename it to `config.yaml`, and modify it with your desired settings.

Question 8

How do I add new services to the Enrichment MCP Server?

Accepted Answer

New services can be added by modifying the `config.yaml` file and creating corresponding Jinja2 templates for prompt construction. Refer to the project documentation for detailed instructions.

Question 9

What are Jinja2 templates used for in the Enrichment MCP Server?

Accepted Answer

Jinja2 templates are used to format the prompts sent to the various enrichment services. This allows for better management of the returned prompts/results and future use cases.

Question 10

Can I use the Enrichment MCP Server with the UBOS platform?

Accepted Answer

Yes, the Enrichment MCP Server seamlessly integrates with the UBOS platform, enabling you to build powerful AI Agents that leverage enriched security data.

Question 11

Where can I find more information about the UBOS platform?

Accepted Answer

Visit the UBOS website at [https://ubos.tech](https://ubos.tech) for more information about the platform and its capabilities.

Question 12

Is the Enrichment MCP Server suitable for production environments?

Accepted Answer

The current implementation is primarily for development and testing purposes. While it can be used in production, it's important to thoroughly test and configure it according to your specific requirements.

Question 13

How can I contribute to the Enrichment MCP Server project?

Accepted Answer

Contributions are welcome! You can submit pull requests with bug fixes, new features, or improvements to the documentation.

Enrichment MCP Server

Resources

Project Details

Recomended MCP Servers

Featured Templates

Customer Relationship Management (CRM)

Unified Authorization Template

Service ERP

Speech to Text

AI Chatbot Starter Kit v0.1

AI Voice Assistant (Voice-Text-Voice)

Start your free trial