# Cyberspf MCP server

Source: https://glimind.com/server/mcp-registry%2Fcom.cyberspf%2Fmcp
Registry id: `mcp-registry/com.cyberspf/mcp`
Status: unknown

## Install

```json
{
  "mcpServers": {
    "cyberspf-mcp-server": {
      "command": "uvx",
      "args": [
        "cyberspf-mcp"
      ]
    }
  }
}
```

Claude Code:

```sh
claude mcp add cyberspf-mcp-server -- uvx cyberspf-mcp
```

## Tools (14)

- `cyberspf_add_to_threat_list`: Add hosts, IPs or CIDR blocks, up to 100 per call
- `cyberspf_alerts`: What changed, newest first; page with before, poll with since
- `cyberspf_bulk_lookup`: Submit many terms at once; returns a job id
- `cyberspf_bulk_result`: Collect a bulk job; polling is free
- `cyberspf_create_threat_list`: Create an empty list, named, tagged and graded
- `cyberspf_investigate`: Looks one thing up and follows what it points at in a single call
- `cyberspf_list_monitors`: What this account watches and when each was last checked
- `cyberspf_lookup`: One IP, domain, CIDR or ASN with ordered sections of findings
- `cyberspf_remove_from_threat_list`: Take entries back out of a threat list
- `cyberspf_report_card`: Graded assessment per monitored domain with recommendations
- `cyberspf_start_monitoring`: Begin watching a domain, IP or ASN
- `cyberspf_stop_monitoring`: Stop watching a monitor
- `cyberspf_tag_suggestions`: Tags already in use to avoid near-miss duplicates
- `cyberspf_threat_lists`: The account's threat lists, their tags and sizes

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.