MCP server wrapper for Yeti — Threat intelligence platform MCP integration.
Yeti (yeti-mcp) is a security tool that provides: Threat intelligence platform MCP integration.
See yeti-platform/yeti-mcp for full documentation.
No API keys required — Yeti runs locally inside the Docker container.
Summary. MCP server wrapper for Yeti — Threat intelligence platform MCP integration.
Tools:
run_yeti_mcp — Run yeti-mcp with the given arguments. Returns structured JSON output.run_yeti_mcpRun yeti-mcp with the given arguments. Returns structured JSON output.
| Parameter | Type | Required | Default | Description |
|---|---|---|---|---|
arguments | string | Yes | — | Command-line arguments (e.g. "--help") |
timeout_seconds | integer | No | 600 | Maximum execution time in seconds |
{
"raw": "yeti-mcp output will appear here"
}
Here are example prompts you can use with Claude (or any MCP client) when this tool is connected:
docker-compose up -d
docker run -i --rm hackerdogs/yeti-mcp:latest
docker run -d -p 8337:8337 \
-e MCP_TRANSPORT=streamable-http \
-e MCP_PORT=8337 \
hackerdogs/yeti-mcp:latest
Add to your Claude Desktop or Cursor MCP config:
{
"mcpServers": {
"yeti-mcp": {
"command": "docker",
"args": ["run", "-i", "--rm", "-e", "MCP_TRANSPORT", "hackerdogs/yeti-mcp:latest"],
"env": {
"MCP_TRANSPORT": "stdio"
}
}
}
}
First, start the server using Docker Compose or docker run with HTTP mode (see Deploy above), then point your MCP client at the running server:
{
"mcpServers": {
"yeti-mcp": {
"url": "http://localhost:8337/mcp"
}
}
}
When to use HTTP mode: HTTP mode is ideal for shared/remote deployments, multi-user setups, and Hackerdogs scheduled prompts. The server runs as a long-lived process and accepts connections from multiple MCP clients concurrently.
| Variable | Default | Description |
|---|---|---|
MCP_TRANSPORT | stdio | Transport mode: stdio or streamable-http |
MCP_PORT | 8337 | HTTP port (only used with streamable-http) |
The fastest way to get started is through Hackerdogs:
Give it a couple of minutes to go live. Then start querying by asking Hackerdogs to use the tool explicitly (e.g. "Use naabu to scan example.com"). If you don't specify, Hackerdogs will automatically choose the best tool for the job — it may choose this one on its own.
Want to contribute or chat with the team? Join our Discord.
docker build -t hackerdogs/yeti-mcp:latest .
./test.sh
1. Start the server in HTTP mode:
docker run -d --rm --name yeti-mcp-test -p 8337:8337 \
-e MCP_TRANSPORT=streamable-http \
hackerdogs/yeti-mcp:latest
2. Initialize the MCP session:
SESSION_ID=$(curl -s -D - -X POST http://localhost:8337/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2024-11-05","capabilities":{},"clientInfo":{"name":"test","version":"0.1"}}}' \
2>&1 | grep -i mcp-session-id | awk '{print $2}' | tr -d '\r\n')
curl -s -X POST http://localhost:8337/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-H "mcp-session-id: $SESSION_ID" \
-d '{"jsonrpc":"2.0","method":"notifications/initialized"}'
3. Call a tool:
curl -s -X POST http://localhost:8337/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-H "mcp-session-id: $SESSION_ID" \
-d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"run_yeti_mcp","arguments":{"arguments":"--help"}}}'
4. Clean up:
docker stop yeti-mcp-test
You can run the yeti-mcp CLI in the same container by overriding the entrypoint for Yeti threat intelligence or security workflows without starting the MCP server.
Show help:
docker run -i --rm --entrypoint yeti-mcp hackerdogs/yeti-mcp:latest --help
Content type
Image
Digest
sha256:9f0ea7d55…
Size
101.9 MB
Last updated
3 months ago
docker pull hackerdogs/yeti-mcp