Cyberbro MCP Server

https://github.com/stanfrbd/mcp-cyberbro
Admin
A Model Context Protocol (MCP) server for Cyberbro that extracts Indicators of Compromise (IoCs)...
Tokens:3,685
Snippets:18
Trust Score:8.1
License:MIT
Update:1 year ago
Show doc for...
Tokens:
Raw
### Local Installation and Setup

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/README.md

Steps for setting up the Cyberbro MCP server locally, including cloning the repository, installing dependencies, and configuring environment variables or CLI arguments.

```bash
git clone https://github.com/stanfrbd/mcp-cyberbro.git
cd mcp-cyberbro
uv run pip install -r requirements.txt
export CYBERBRO_URL=http://localhost:5000
uv run mcp-cyberbro-server.py
```

--------------------------------

### MCP Server Startup Log

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/README.md

Example log output when the MCP OpenAPI Proxy starts, showing server details and configuration loading.

```text
Starting MCP OpenAPI Proxy with config file: config.json
2025-05-21 14:15:01,480 - INFO - Starting MCPO Server...
2025-05-21 14:15:01,480 - INFO -   Name: MCP OpenAPI Proxy
2025-05-21 14:15:01,480 - INFO -   Version: 1.0
2025-05-21 14:15:01,480 - INFO -   Description: Automatically generated API from MCP Tool Schemas
2025-05-21 14:15:01,480 - INFO -   Hostname: docker-services
2025-05-21 14:15:01,480 - INFO -   Port: 8000
2025-05-21 14:15:01,480 - INFO -   API Key: Not Provided
2025-05-21 14:15:01,480 - INFO -   CORS Allowed Origins: ['*']
2025-05-21 14:15:01,480 - INFO -   Path Prefix: /
2025-05-21 14:15:01,481 - INFO - Loading MCP server configurations from: config.json
2025-05-21 14:15:01,481 - INFO - Configured MCP Servers:
2025-05-21 14:15:01,481 - INFO -   Configuring Stdio MCP Server 'cyberbro' with command: uv with args: ['run', './mcp-cyberbro-server.py']
2025-05-21 14:15:01,481 - INFO - Uvicorn server starting...
INFO:     Started server process [7331]
INFO:     Waiting for application startup.
INFO:     Application startup complete.
INFO:     Uvicorn running on http://0.0.0.0:8000 (Press CTRL+C to quit)
```

--------------------------------

### Starting the MCP Server

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/README.md

Command to start the Cyberbro MCP server, which listens for MCP protocol messages on stdin/stdout.

```bash
uv run mcp-cyberbro-server.py
```

--------------------------------

### Docker Installation

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/README.md

Instructions for installing the Cyberbro MCP server using Docker, including pulling the image from GitHub Container Registry.

```bash
export CYBERBRO_URL=http://localhost:5000
docker pull ghcr.io/stanfrbd/mcp-cyberbro:latest
```

--------------------------------

### Starting MCP OpenAPI Proxy

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/README.md

Command to start the MCP OpenAPI Proxy using a specified configuration file and port.

```bash
uvx mcpo --config config.json --port 8000
```

--------------------------------

### MCP Client Connection Example

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/README.md

Example of how an MCP client can be configured to connect to the running MCP OpenAPI Proxy server.

```text
http://localhost:8000/cyberbro
```

--------------------------------

### Example Cyberbro Queries

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/README.md

Examples of how to interact with Cyberbro using natural language prompts, demonstrating its integration with LLMs for security analysis and OSINT investigations.

```text
Cyberbro: Check indicators for target.com
```

```text
Can you check this IP reputation with Cyberbro? 192.168.1.1
Use github, google and virustotal engines.
```

```text
I want to analyze the domain example.com. What can Cyberbro tell me about it?
Use max 3 engines.
```

```text
Analyze these observables with Cyberbro: suspicious-domain.com, 8.8.8.8, and 44d88612fea8a8f36de82e1278abb02f. Use all available engines.
```

```text
I found this (hash|domain|url|ip|extension) Can you submit it for analysis to Cyberbro and analyze the results?
```

```text
Create an OSINT report for the domain example.com using Cyberbro.
Use all available engines. and pivot on the results for more information.
Use a maximum of 10 analysis requests.
```

--------------------------------

### Cyberbro Tool API Reference

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/README.md

API documentation for the Cyberbro tools, detailing their purpose, arguments, and return values. This includes functions for analyzing observables, checking analysis status, retrieving results, listing engines, and getting the web URL.

```APIDOC
analyze_observable:
  description: Extracts and analyzes IoCs from input text using selected engines. Returns analysis ID.
  arguments:
    text (string, required): The input text containing IoCs.
    engines (list, optional): List of engines to use for analysis.
  returns: JSON with analysis ID and submission details.

is_analysis_complete:
  description: Checks if the analysis for a given ID is finished. Returns status.
  arguments:
    analysis_id (string, required): The ID returned by analyze_observable.
  returns: JSON with completion status.

get_analysis_results:
  description: Retrieves the results of a completed analysis by ID. Returns analysis results.
  arguments:
    analysis_id (string, required): The ID of the analysis.
  returns: JSON with analysis results.

get_engines:
  description: Lists available analysis engines supported by Cyberbro.
  arguments: (none)
  returns: JSON with available engines.

get_web_url:
  description: Returns the web URL for the Cyberbro instance.
  arguments:
    analysis_id (string, required): The ID of the analysis.
  returns: JSON with the web URL.
```

--------------------------------

### MCP CLI with Service Deployment

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/requirements.txt

Shows how to deploy a specific service using the mcp CLI. This command initiates the deployment process for a given service name.

```bash
mcp deploy my-service
```

--------------------------------

### Optional Command-Line Arguments

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/README.md

Configuration options for the Cyberbro MCP server via command-line arguments, including disabling SSL verification or specifying a custom API prefix.

```bash
uv run mcp-cyberbro-server.py --no_ssl_verify --api_prefix /api/v1
```

--------------------------------

### MCP CLI Usage

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/requirements.txt

Demonstrates basic usage of the mcp command-line interface. This tool is used for interacting with the MCP system.

```bash
mcp --help
mcp status
mcp deploy <service>
```

--------------------------------

### Optional Environment Variables

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/README.md

Configuration options for the Cyberbro MCP server via environment variables, such as disabling SSL verification or setting a custom API prefix.

```bash
export SSL_VERIFY=false
export API_PREFIX=/api/v1
```

--------------------------------

### HTTPX Client for MCP

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/requirements.txt

Illustrates how to use the httpx library in Python to make requests to MCP services. This is useful for programmatic interaction.

```python
import httpx

response = httpx.get("http://localhost:8000/status")
print(response.json())
```

--------------------------------

### Claude Desktop (Local) Configuration

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/README.md

Configuration for integrating the MCP server with Claude Desktop using a local Python environment. This requires specifying the Python execution command and environment variables.

```json
{
  "mcpServers": {
    "cyberbro": {
      "command": "uv",
      "args": [
        "run",
        "C:\\Users\\path\\to\\mcp-cyberbro-server.py"
      ],
      "env": {
        "CYBERBRO_URL": "http://localhost:5000",
        "API_PREFIX": "api"
      }
    }
  }
}
```

--------------------------------

### MCP OpenAPI Proxy Configuration

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/README.md

Configuration file for the MCP OpenAPI Proxy, which exposes the MCP server via an OpenAPI interface. This includes server command, arguments, and environment variables.

```json
{
    "mcpServers": {
        "cyberbro": {
            "command": "uv",
            "args": [
                "run",
                "./mcp-cyberbro-server.py"
            ],
            "env": {
                "CYBERBRO_URL": "https://cyberbro.lab.local",
                "API_PREFIX": "api"
            }
        }
    }
}
```

--------------------------------

### Claude Desktop (Docker) Configuration

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/README.md

Configuration for integrating the MCP server with Claude Desktop using Docker. This involves specifying the Docker command and environment variables for the MCP server.

```json
{
  "mcpServers": {
    "cyberbro": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "CYBERBRO_URL",
        "-e",
        "API_PREFIX",
        "ghcr.io/stanfrbd/mcp-cyberbro:latest"
      ],
      "env": {
        "CYBERBRO_URL": "http://localhost:5000",
        "API_PREFIX": "api"
      }
    }
  }
}
```

--------------------------------

### Git Branching Workflow

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/CONTRIBUTING.md

Standard Git workflow for contributing code. This involves forking the repository, creating a new feature branch, making changes, and submitting a pull request.

```git
git checkout -b feature/my-feature
```

--------------------------------

### OpenAPI Specification Endpoint

Source: https://github.com/stanfrbd/mcp-cyberbro/blob/main/README.md

The endpoint where the OpenAPI specification for the MCP server can be accessed.

```text
http://localhost:8000/cyberbro/openapi.json
```
Tokens:
Raw