What is TI Mindmap HUB?

TI Mindmap HUB is a threat intelligence platform that automatically collects, analyzes, and enriches cybersecurity articles from leading sources. Every article is processed with AI to generate:

• AI Summaries — Concise overviews of each threat
• Threat Mindmaps — Visual maps of attack flows and relationships
• MITRE ATT&CK TTPs — Tactics, Techniques, and Procedures mapping
• IOC Extraction — Indicators of Compromise (IPs, domains, hashes, URLs)
• STIX 2.1 Bundles — Structured threat data compatible with MISP, OpenCTI, Microsoft Sentinel
• CVE Intelligence — Enriched vulnerability data with EPSS scores and exploitation status
• Weekly Briefings — Curated threat landscape reports

This MCP Server brings all of this directly into your AI assistant.

Why Use the MCP Server?

Compatible Clients

The MCP server uses standard HTTP and SSE transports, so it should work with any MCP-compatible client (Claude Code, Cursor, Windsurf, ChatGPT, etc.). See the Integration Docs for protocol details.

Tested a different client? We welcome contributions! If you have successfully connected using another MCP client, please open a Pull Request to add a setup guide and we'll include it in the documentation.

Quick Start

1. Get Your API Key

Sign up at ti-mindmap-hub.com and generate your personal API key from your account settings.

Your API key has the format tim_xxxxxxxxxxxx.

2. Configure Your Client

{
  "servers": {
    "ti-mindmap": {
      "url": "https://ti-mindmap-mcp.happyfield-b3b5145b.westeurope.azurecontainerapps.io/mcp",
      "headers": {
        "X-API-Key": "${input:tiMindmapApiKey}"
      }
    }
  },
  "inputs": [
    {
      "id": "tiMindmapApiKey",
      "type": "promptString",
      "description": "TI Mindmap HUB API Key",
      "password": true
    }
  ]
}

{
  "mcpServers": {
    "ti-mindmap": {
      "url": "https://ti-mindmap-mcp.happyfield-b3b5145b.westeurope.azurecontainerapps.io/mcp/sse",
      "transport": "sse",
      "headers": {
        "X-API-Key": "tim_your_api_key_here"
      }
    }
  }
}

3. Start Asking

Open your AI assistant and start querying threat intelligence:

"Show me the latest threat intelligence reports about ransomware"

Available Tools

The MCP server exposes 19 tools organized in 6 categories.

Reports

CVE Intelligence

IOC Search

STIX 2.1 Bundles

Weekly Briefings

Platform

What You Can Ask

Here are some example prompts to try with your AI assistant:

Threat Research

"Show me the latest reports about APT29"

"What are the most recent ransomware campaigns from this week?"

"Find reports tagged with 'phishing' from The Hacker News"

Vulnerability Management

"Tell me everything about CVE-2024-3400"

"List all critical CVEs from the last 30 days"

"Which CVEs are currently being exploited in the wild?"

IOC Investigation

"Is this IP malicious? 203.0.113.42"

"Search for this hash: d41d8cd98f00b204e9800998ecf8427e"

"Check if evil-domain.com appears in any threat reports"

Threat Intelligence Feeds

"Give me this week's threat briefing"

"Summarize the threat landscape for the last 7 days"

STIX & Integration

"Get the STIX bundle for this report so I can import it into OpenCTI"

"Export threat data in STIX 2.1 format for Microsoft Sentinel"

Article Submission

"Analyze this article: https://example.com/threat-report"

Authentication

All API calls require an API key passed via the X-API-Key header.

API keys are generated from your account on ti-mindmap-hub.com.

Monitored Sources

TI Mindmap HUB continuously monitors leading cybersecurity sources including:

• The Hacker News
• BleepingComputer
• Krebs on Security
• Dark Reading
• SecurityWeek
• Recorded Future
• Cisco Talos
• Unit 42 (Palo Alto Networks)
• Microsoft Security Blog
• Google Threat Intelligence
• ...and more

MCP Integration Documentation

For detailed technical documentation on integrating with the MCP server, see the mcp-integration/ directory:

Architecture Overview

┌──────────────────────────────────────┐
│  Your AI Assistant                   │
│  (VS Code / Claude Desktop / ...)   │
└──────────────┬───────────────────────┘
               │ MCP Protocol
               │ (HTTP or SSE)
               ▼
┌──────────────────────────────────────┐
│  TI Mindmap MCP Server              │
│  ✦ 19 threat intelligence tools     │
│  ✦ API Key authentication           │
│  ✦ Real-time data access            │
└──────────────┬───────────────────────┘
               │
               ▼
┌──────────────────────────────────────┐
│  TI Mindmap HUB Platform            │
│  ti-mindmap-hub.com                  │
│  ✦ AI-powered analysis engine       │
│  ✦ CVE & IOC databases              │
│  ✦ STIX 2.1 generation              │
│  ✦ Weekly briefing system            │
└──────────────────────────────────────┘

Links

Support

• Email: [email protected] — for bug reports, feature requests, and general inquiries
• Platform: Visit ti-mindmap-hub.com for account and platform support

License

This project is licensed under the MIT License.