Cortex MCP server

This is a small helper program that connects your AI assistant to Cortex, a free security tool that checks whether an IP address, web link, or file looks dangerous. It is handy if you work in IT or security and already have Cortex running, because you can just ask your AI to look something up instead of clicking around the Cortex website.

What this MCP server does

You ask your AI something like whether an IP address looks bad. The AI passes that to this helper program. The helper program talks to your Cortex instance, which runs an analyzer such as AbuseIPDB or VirusTotal on the item. Cortex does the actual checking and sends a report back. The helper hands that report to your AI, and your AI shows it to you in plain language.

Click to zoom

What you can do with it

• Check an IP address for a bad reputation using AbuseIPDB
• Look up an IP, domain, URL, or email address with AbuseFinder
• Scan a web link with VirusTotal
• Analyze a web link with urlscan.io
• Pick which Cortex analyzer to use for a request
• Get a structured report back from Cortex in the chat

Try asking your AI

• “Is 8.8.8.8 a suspicious IP? Check it with AbuseIPDB.”
• “Use AbuseFinder to look up the domain example.com.”
• “Scan this link with VirusTotal: http://suspicious-site.example”
• “Analyze this URL with urlscan.io and tell me what it found.”

What it gives back to you

You get back the report from Cortex for the item you asked about, shown in the chat. That usually includes a summary of what the analyzer found, such as a reputation score, a list of warnings, or details about the domain or link. If the analyzer is not set up correctly, you will see an error message instead.

Before you start

Who it's for

IT and security people who already use Cortex and want to ask their AI assistant to check suspicious IPs, links, and domains.