Optix

by AdamWaldie

174 downloads Not rated yet
GitHub

About

# OPTIX MCP Server A standalone Python/FastAPI server that implements the [Model Context Protocol (MCP)](https://modelcontextprotocol.io) for the OPTIX threat intelligence platform. It exposes 26 analyst-friendly tools that AI assistants and programmatic consumers can use to query threat feeds, search documents and…

Explore

- 26 tools across Read, Write, and AI categories.
- Credit system with pre-flight balance checks.
- Supports threat feed queries, IOC search, document retrieval.
- AI-powered entity research and report generation.
- Watchlist management with notifications.
- Integration with Claude Desktop and Cursor via MCP.

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

  1. Download and install Highlight from highlightai.com/download
  2. Navigate to the plugins tab and select "Add Custom Plugin"
  3. Configure the plugin with the settings below
    Plugin Name Optix
    Command (node, npx, python, etc.)

    Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.

  4. Enable "Start Automatically" if you want the plugin to start when Highlight launches

From the repository

- Python 3.11+
- An active OPTIX installation
- An OPTIX API key (create one in OPTIX Settings → API Keys)

| Variable | Required | Default | Description |
|---|---|---|---|
| OPTIX_API_URL | No | https://optixthreatintelligence.co.uk | Base URL of the OPTIX backend. Override only when self-hosting. |
| MCP_HOST | No | 0.0.0.0 | Host address the MCP server binds to |
| MCP_PORT | No | 8090 | Port the MCP server listens on |
| OPTIX_REQUEST_TIMEOUT | No | 30 | Seconds before upstream OPTIX calls time out |
| OPTIX_SKIP_AUTH | No | false | When true, bypasses API key validation — allows unauthenticated tool listing (used by Glama registry inspection). Never set to true in production. |

Create a .env file in the OPTIX MCP/ directory to set these, or export them as shell variables.


bash cd "OPTIX MCP" cp .env.example .env # then edit .env with your OPTIX_API_URL pip install -r requirements.txt python main.py

The server starts on http://0.0.0.0:8090 by default.

- Health check: GET http://localhost:8090/health
- MCP SSE endpoint: GET http://localhost:8090/mcp (requires X-API-Key header)

Every request to the MCP endpoint must include your OPTIX API key in the X-API-Key header:


X-API-Key: optix_your_api_key_here

Unauthenticated requests receive a structured 401 response:

json
{
"error": "Missing API key",
"detail": "Provide your OPTIX API key in the X-API-Key request header.",
"docs": "See README.md for instructions on obtaining an API key."
}
```

> Authentication: All tools authenticate via the X-API-Key header set in your MCP client configuration — there is no api_key tool parameter. The key is validated against the OPTIX backend on every request.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "optix": {
            "OPTIX-MCP": {
                "command": "python",
                "args": [
                    "main.py"
                ]
            }
        }
    }
}

McpServers

{
    "OPTIX-MCP": {
        "command": "python",
        "args": [
            "main.py"
        ]
    }
}

A standalone Python/FastAPI server that implements the Model Context Protocol (MCP) for the OPTIX threat intelligence platform. It exposes 26 analyst-friendly tools that AI assistants and programmatic consumers can use to query threat feeds, search documents and indicators, manage watchlists, triage IOCs, generate detection rules, trigger AI research, and produce intelligence reports — without needing to understand OPTIX's internal REST API.

Requirements

- Python 3.11+
- An active OPTIX installation
- An OPTIX API key (create one in OPTIX Settings → API Keys)

Environment Variables

| Variable | Required | Default | Description |
|---|---|---|---|
| OPTIX_API_URL | No | https://optixthreatintelligence.co.uk | Base URL of the OPTIX backend. Override only when self-hosting. |
| MCP_HOST | No | 0.0.0.0 | Host address the MCP server binds to |
| MCP_PORT | No | 8090 | Port the MCP server listens on |
| OPTIX_REQUEST_TIMEOUT | No | 30 | Seconds before upstream OPTIX calls time out |
| OPTIX_SKIP_AUTH | No | false | When true, bypasses API key validation — allows unauthenticated tool listing (used by Glama registry inspection). Never set to true in production. |

Create a .env file in the OPTIX MCP/ directory to set these, or export them as shell variables.

```env

No reviews yet — be the first

Sign in to leave a review

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.