Truss Threat Intelligence
Query Truss threat intelligence via hosted MCP (OAuth).
Connector by truss-security.com · Domain verified by the MCP Registry
Install
Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install connector/truss-security-com-truss-mcp
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Remote endpoint
https://api.truss-security.com/mcpRemote (HTTP)
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 6 read · 0 write · 0 delete · 1 not yet classified
- Secrets
- None asked for
- Install scripts
- Nothing to install (hosted)
- Runs as
- Hosted (remote endpoint)
Tools by what they do 7
Read from the source code; the running server may list different tools.
Read 6 · Look things up without changing anything.
get_product_stixlist_filter_attributessearch_productssearch_products_pagesearch_products_stixvalidate_filter_expression
Not yet classified 1 · We could not tell from the name and description.
iterate_products_summary
Network hosts it talks to 1
api.truss-security.com· found in remote endpoint, install command
Tools (7)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
get_product_stixGet product STIX bundleFetch a STIX 2.x bundle for a single product by numeric id. Use when the user asks for STIX for one product.
iterate_products_summaryIterate Truss products (capped pages)Description is built at runtime.
list_filter_attributesList FilterQL attributesReturns allowed FilterQL attribute names and supported comparison/logical operators. Call when unsure of field names before drafting filterExpression.
search_productsSearch Truss productsDescription is built at runtime.
search_products_pageSearch Truss products (paginated)Same as search_products; call when the prior response has hasMore: true and you need the next page. Increment page.
search_products_stixSearch Truss products (STIX)Description is built at runtime.
validate_filter_expressionValidate FilterQLCheck FilterQL syntax before calling search_products. Always call this when you authored the filterExpression.
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Last commit
- Oct 16, 2026 (12 days ago)
- Last release
- Jul 27, 2026 (3 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- Registry name
com.truss-security/truss-mcp- Version
- 1.1.0
- Auth
- Auth not stated
- License
- MIT
- Website
- truss-security.com/mcp
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
Cite this page
Truss Threat Intelligence MCP server. Agent Mart. https://agentmart.dev/connectors/truss-security-com-truss-mcp (last updated 2026-10-24)