truss-mcp
Query Truss security information, threat intelligence and threat actor naming conventions from Cursor via the hosted Truss MCP (OAuth).
От сообщества: Добавлен пользователем или импортирован; проверьте владельца перед подключениемРаботаетБез входаГлобальныйБесплатноТолько чтение
Что умеет
- Lookup Ioc: Pivot on a single indicator of compromise. Use for questions like "is this IP/domain/url/hash known?" Returns product search results, not a narrative answer. After this, call get_product w
- Search Threats: Structured discovery over public Truss products. Use for category, region, tags, author, source, type, title, date, and pagination filters. Do not use for natural-language answer synth
- Get Product: Fetch one Truss product as JSON by numeric id or truss_prod_id. Use after lookup_ioc or search_threats when a concise search result needs full product detail.
Какие данные видит
Нужен ли аккаунт
Не нужен: сервер работает без входа
Query Truss security information, threat intelligence and threat actor naming conventions from Cursor via the hosted Truss MCP (OAuth). Build Truss Query Language (TQL) filters, pull security data, build detection rules, lookup IOCs, search threats, and pull STIX products. Requires Truss Growth+ plans.
Список инструментов сервера (5)
Технические названия из tools/list. Нужны только разработчикам.
| lookup_ioc | Pivot on a single indicator of compromise. Use for questions like "is this IP/domain/url/hash known?" Returns product search results, not a narrative answer. After this, call get_product with an id for detail. |
| search_threats | Structured discovery over public Truss products. Use for category, region, tags, author, source, type, title, date, and pagination filters. Do not use for natural-language answer synthesis or admin/internal routes. |
| get_product | Fetch one Truss product as JSON by numeric id or truss_prod_id. Use after lookup_ioc or search_threats when a concise search result needs full product detail. |
| get_product_stix | Fetch one Truss product as a STIX 2.1 bundle by numeric id or truss_prod_id. Use for export, chaining, or SIEM handoff when STIX is specifically needed. |
| search_stix | Search public Truss products with the same structured filters as search_threats, but return a STIX 2.1 bundle for interoperable tooling. Prefer search_threats for summaries because it is smaller. |