mcp-taxii

# MCP TAXII A Model Context Protocol (MCP) server that acts as a TAXII client for AI agents, enabling them to interact with Threat Intelligence platforms using the TAXII protocol. ## Overview MCP TAXII provides a bridge between AI agents and TAXII (Trusted Automated eXchange of Intelligence Information) servers, allowing AI systems to: - Query threat intelligence data - Retrieve STIX objects from TAXII collections - Discover available threat intelligence sources - Add new threat intelligence to collections (when permitted) The server supports both TAXII 2.0 and TAXII 2.1 protocols. ## Features - **TAXII 2.0 & 2.1 Support**: Compatible with both major TAXII protocol versions - **FastMCP Framework**: Built on FastMCP for efficient MCP server implementation - **Authentication Support**: Handles username/password authentication for TAXII servers - **Collection Management**: Browse, query, and interact with TAXII collections - **STIX Object Operations**: Retrieve and add STIX threat intelligence objects - **Pagination Support**: Handles large datasets with built-in pagination (TAXII 2.1) - **Environment Variable Configuration**: Easy setup via environment variables ## Quick Start with uvx (No Installation Required) `uvx` is a tool that allows you to run Python packages without installing them. This is perfect for: - **Quick testing** without cluttering your system - **Running in CI/CD** pipelines - **Isolated execution** without dependency conflicts - **Always running the latest version** ### Prerequisites for uvx ```bash # Install uv (which includes uvx) pip install uv # or pipx install uv ``` ### Running Directly from PyPI Once published to PyPI, you can run MCP TAXII instantly: ```bash # Run the latest version uvx mcp-taxii # Run a specific version uvx mcp-taxii==0.1.0 # With environment configuration MCPTAXII_HOST="http://localhost:8000/taxii21/" \ MCPTAXII_USERNAME="admin" \ MCPTAXII_PASSWORD="admin_password" \ uvx mcp-taxii ``` ### Running from Git…