Enrichment

A Model Context Protocol server for enriching data from multiple security products

python

GitHub Stars

python

Language

6 months ago

First Indexed

2 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "msadministrator-enrichment-mcp": {
      "command": "uv",
      "args": [
        "--directory",
        "/ABSOLUTE/PATH/TO/CLONED/REPOSITORY/enrichment-mcp",
        "run",
        "server.py"
      ],
      "env": {
        "ENRICHMENT_MCP_HIBP_KEY": "YOUR_HIBP_KEY",
        "ENRICHMENT_MCP_SHODAN_KEY": "YOUR_SHODAN_KEY",
        "ENRICHMENT_MCP_URLSCAN_KEY": "YOUR_URLSCAN_KEY",
        "ENRICHMENT_MCP_ABUSEIPDB_KEY": "YOUR_ABUSEIPDB_KEY",
        "ENRICHMENT_MCP_ALIENVAULT_KEY": "YOUR_ALIENVAULT_KEY",
        "ENRICHMENT_MCP_VIRUSTOTAL_KEY": "YOUR_VIRUSTOTAL_KEY",
        "ENRICHMENT_MCP_HYBRIDANALYSIS_KEY": "YOUR_HYBRIDANALYSIS_KEY"
      }
    }
  }
}

You run an Enrichment MCP Server that orchestrates third‑party enrichment services for a provided observable. By combining configured services with the observable type, it routes lookups to the appropriate enrichment providers (such as VirusTotal, Hybrid Analysis, and others) to return contextual enrichment data for your observables.

How to use

Start by running the MCP server with your environment variables loaded from a secret file. You will interact with the server through an MCP client by sending an observable to the generic enrichment endpoint, which will route the request to the appropriate enrichment services based on the observable type.

How to install

Prerequisites you need on your system before starting:

Install the runtime tool you will use to run MCP servers. In this setup, you’ll use the Universal Validator (uv) tool to run the Python MCP server. Install uv using the following command.

curl -fsSL https://astral.sh/uv/install.sh | sh

Create a local environment file to securely store credentials and service keys. Copy the provided template and fill in your secrets.

.env.example -> .env

Run the MCP server locally by loading your environment variables from the .env file and starting the server script.

uv run --env-file .env server.py

Configuration and environment notes

Environmental variables are used to configure access to external enrichment services. The following variables are supported to securely provide API keys for the enrichment providers.

ENRICHMENT_MCP_VIRUSTOTAL_KEY
ENRICHMENT_MCP_HYBRIDANALYSIS_KEY
ENRICHMENT_MCP_ALIENVAULT_KEY
ENRICHMENT_MCP_SHODAN_KEY
ENRICHMENT_MCP_URLSCAN_KEY
ENRICHMENT_MCP_ABUSEIPDB_KEY
ENRICHMENT_MCP_HIBP_KEY

Configuration and operation overview

The server exposes a single MCP tool for enrichment lookups.

Tool: lookup-observable — a generic endpoint that examines the given observable and routes it to the correct enrichment service.

Available tools

lookup-observable

A generic endpoint which examines and routes the given observable to the correct enrichment service.

Built by

VeilStrat

AI signals for GTM teams