EclecticIQ (EIQ) MCP Server#

The EclecticIQ MCP Server lets external AI agents connect to your Intelligence Center and work with intelligence data directly from a chat interface.

What is MCP?#

The Model Context Protocol (MCP) is an open standard that lets AI agents connect to external tools and data sources through a single, standardized server interface. Instead of every agent needing custom integration code, an MCP server exposes a consistent set of tools that any MCP-compatible agent can discover and call.

EIQ exposes a public MCP server that external AI agents can connect to in order to interact with the Intelligence Center — searching, creating, and enriching intelligence without leaving the agent.

Supported MCP tools#

Tool

Description

create_entity

Create a new entity (Indicator, Report, Threat Actor, etc.) from the details you provide.

edit_entity

Update the title and description of an existing entity in the platform.

create_tags_for_entity

Add one or more tags to an existing entity to label or group it.

web_enrichment_for_entity

Enrich an existing entity with additional context gathered from the web.

extract_entities

Detect and extract entities and observables from a block of text.

create_observables

Create observables from structured input. Optionally define the maliciousness (High, Medium, Low, or Safe) for each observable at creation time.

create_relationship_for_entity

Create a link between two entities — provide the two entities that should be connected.

convert_nl_to_lucene

Translate a plain-language question into a Lucene search query.

find_entities_with_lucene_query

Search the platform for entities matching a Lucene query.

find_entities_by_title

Find entities whose title matches your search term.

user_help

Explain what the AI assistant can do and which tools are available.

web_search

Search the web for a query and return results.

add_entity_to_graph

Add an entity to the current open graph. (Work in progress.)

Supported external agents#

Each agent has its own setup page:

Begin with the base setup

All agents require the common setup first. See Base setup before configuring your agent.