Skip to main content

🛠️ MISP tool MCP server 💪 all 44 operations

Workflow preview

Workflow preview
100%
🛠️ MISP tool MCP server 💪 all 44 operations preview
Open on n8n.io

Important notice

This workflow is provided as-is. Please review and test before using in production.

1. Workflow Overview

Need help? Want access to this workflow + many more paid workflows + live Q&A sessions with a top verified n8n creator? [Join the community](https://www.skool.com/beyond nodes automation lab 2006/a...

Best for

  • SecOps automation workflows
  • AI Chatbot automation workflows
  • advanced n8n builders looking for reusable templates

Tools used

n8n-nodes-base.stickynote, @n8n/n8n-nodes-langchain.mcptrigger, n8n-nodes-base.misptool

Source and attribution

This workflow is cataloged by N8N Workflows and links back to its original n8n.io source page by David Ashby.

Original n8n.io source

1.1 Workflow description

Title
🛠️ MISP tool MCP server 💪 all 44 operations
Workflow name
🛠️ MISP tool MCP server 💪 all 44 operations

Need help? Want access to this workflow + many more paid workflows + live Q&A sessions with a top verified n8n creator?

Join the community

Complete MCP server exposing all MISP Tool operations to AI agents. Zero configuration needed - all 44 operations pre-built.

⚡ Quick Setup

  1. Import this workflow into your n8n instance
  2. Activate the workflow to start your MCP server
  3. Copy the webhook URL from the MCP trigger node
  4. Connect AI agents using the MCP URL

🔧 How it Works

MCP Trigger: Serves as your server endpoint for AI agent requests • Tool Nodes: Pre-configured for every MISP Tool operation • AI Expressions: Automatically populate parameters via $fromAI() placeholders • Native Integration: Uses official n8n MISP Tool tool with full error handling

📋 Available Operations (44 total)

Every possible MISP Tool operation is included:

🔧 Attribute (6 operations)

Create an attributeDelete an attributeGet an attributeGet many attributesGet a filtered list of attributesUpdate an attribute

📅 Event (8 operations)

Create an eventDelete an eventGet an eventGet many eventsPublish an eventGet a filtered list of eventsUnpublish an eventUpdate an event

🔧 Eventtag (2 operations)

Add a tag to an eventRemove a tag from an event

🔧 Feed (6 operations)

Create a feedDisable a feedEnable a feedGet a feedGet many feedsUpdate a feed

🔧 Galaxy (3 operations)

Delete a galaxyGet a galaxyGet many galaxies

🔧 Noticelist (2 operations)

Get a noticelistGet many noticelists

🔧 Object (1 operations)

Get a filtered list of objects

🔧 Organisation (5 operations)

Create an organizationDelete an organizationGet an organizationGet many organizationsUpdate an organization

🏷️ Tag (4 operations)

Create a tagDelete a tagGet many tagsUpdate a tag

👤 User (5 operations)

Create a userDelete a userGet a userGet many usersUpdate a user

🔧 Warninglist (2 operations)

Get a warninglistGet many warninglists

🤖 AI Integration

Parameter Handling: AI agents automatically provide values for: • Resource IDs and identifiers • Search queries and filters • Content and data payloads • Configuration options

Response Format: Native MISP Tool API responses with full data structure

Error Handling: Built-in n8n error management and retry logic

💡 Usage Examples

Connect this MCP server to any AI agent or workflow:

Claude Desktop: Add MCP server URL to configuration • Custom AI Apps: Use MCP URL as tool endpoint • Other n8n Workflows: Call MCP tools from any workflow • API Integration: Direct HTTP calls to MCP endpoints

✨ Benefits

Complete Coverage: Every MISP Tool operation available • Zero Setup: No parameter mapping or configuration needed • AI-Ready: Built-in $fromAI() expressions for all parameters • Production Ready: Native n8n error handling and logging • Extensible: Easily modify or add custom logic

> 🆓 Free for community use! Ready to deploy in under 2 minutes.

1.2 Logical Blocks

This catalog entry is organized from the workflow JSON. The node-level section below shows the executable blocks available for review before importing the template.

2. Block-by-Block Analysis

Block 1 - Workflow Overview 0

Type / Role
n8n-nodes-base.stickyNote - stickyNote
Config choices
Version 1

Block 2 - MISP Tool MCP Server

Type / Role
@n8n/n8n-nodes-langchain.mcpTrigger - mcpTrigger
Config choices
Version 1

Block 3 - Create an attribute

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 4 - Delete an attribute

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 5 - Get an attribute

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 6 - Get many attributes

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 7 - Get a filtered list of attributes

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 8 - Update an attribute

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 9 - Sticky Note 1

Type / Role
n8n-nodes-base.stickyNote - stickyNote
Config choices
Version 1

Block 10 - Create an event

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 11 - Delete an event

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 12 - Get an event

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 13 - Get many events

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 14 - Publish an event

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 15 - Get a filtered list of events

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 16 - Unpublish an event

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 17 - Update an event

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 18 - Sticky Note 2

Type / Role
n8n-nodes-base.stickyNote - stickyNote
Config choices
Version 1

Block 19 - Add a tag to an event

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 20 - Remove a tag from an event

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 21 - Sticky Note 3

Type / Role
n8n-nodes-base.stickyNote - stickyNote
Config choices
Version 1

Block 22 - Create a feed

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 23 - Disable a feed

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Block 24 - Enable a feed

Type / Role
n8n-nodes-base.mispTool - mispTool
Config choices
Version 1

Showing the first 24 of 57 workflow blocks. Download the JSON for the full node graph.

3. Summary Table

Workflow 🛠️ MISP tool MCP server 💪 all 44 operations
Complexity advanced
Nodes 57
Categories SecOps, AI Chatbot
Author David Ashby
Published 22 Jun 2025

4. Reproducing the Workflow from Scratch

  1. 1. Download the workflow JSON

    Use the JSON export at /data/workflows/5122/5122.json as the source template for this automation.

  2. 2. Import the template into n8n

    Open n8n, import the downloaded JSON, and review each node before activating the workflow.

  3. 3. Configure credentials and variables

    Replace placeholder credentials, API keys, webhook URLs, account IDs, and environment-specific values with your own settings.

  4. 4. Test with sample data

    Run the workflow manually or in a staging workspace, inspect node output, and confirm downstream systems receive the expected data.

  5. 5. Activate and monitor

    Enable the workflow only after testing, then monitor executions, errors, and rate limits during the first production runs.

5. General Notes & Resources

Review imported nodes carefully before activation. This catalog entry is intended to help you inspect the workflow structure, understand required services, and find related templates faster.

Node names, credentials, schedules, webhook paths, and external service limits may need adjustment for your workspace.

Frequently asked questions

What does 🛠️ MISP tool MCP server 💪 all 44 operations do?

Need help? Want access to this workflow + many more paid workflows + live Q&A sessions with a top verified n8n creator? [Join the community](https://www.skool.com/beyond nodes automation lab 2006/a...

What do I need before importing this workflow?

Review the workflow JSON, configure any required credentials in n8n, and test the automation in a safe workspace before using it in production.

Can I customize this workflow?

Yes. Use the block-by-block analysis and the downloadable JSON to inspect each node, then adjust credentials, prompts, schedules, filters, or destinations for your SecOps, AI Chatbot use case.