Automation library · Setup and learning

MISP tool MCP server all 44 operations

Started by an event in a connected app. It calls services over plain HTTP rather than through connectors. 45 steps: large, and worth reading before you trust it with anything live.

Large

45 stepsLarge: read it before trusting it with anything live
0Branches: places the flow splits
0Loops or waits
0Services by connector: it calls them over plain HTTP

The flow

Starts it 1Service 44

The steps in the order they run, from what starts it.

  1. 1Create an attributeMisp ToolService
  2. 2Delete an attributeMisp ToolService
  3. 3Get an attributeMisp ToolService
  4. 4Get many attributesMisp ToolService
  5. 5Get a filtered list of attributesMisp ToolService
  6. 6Update an attributeMisp ToolService
  7. 7Create an eventMisp ToolService
  8. 8Delete an eventMisp ToolService
  9. 9Get an eventMisp ToolService
  10. 10Get many eventsMisp ToolService
  11. 11Publish an eventMisp ToolService
  12. 12Get a filtered list of eventsMisp ToolService
  13. 13Unpublish an eventMisp ToolService
  14. 14Update an eventMisp ToolService
  15. 15Add a tag to an eventMisp ToolService
  16. 16Remove a tag from an eventMisp ToolService
  17. 17Create a feedMisp ToolService
  18. 18Disable a feedMisp ToolService
  19. 19Enable a feedMisp ToolService
  20. 20Get a feedMisp ToolService
  21. 21Get many feedsMisp ToolService
  22. 22Update a feedMisp ToolService
  23. 23Delete a galaxyMisp ToolService
  24. 24Get a galaxyMisp ToolService
  25. 25Get many galaxiesMisp ToolService
  26. 26Get a noticelistMisp ToolService
  27. 27Get many noticelistsMisp ToolService
  28. 28Get a filtered list of objectsMisp ToolService
  29. 29Create an organizationMisp ToolService
  30. 30Delete an organizationMisp ToolService
  31. 31Get an organizationMisp ToolService
  32. 32Get many organizationsMisp ToolService
  33. 33Update an organizationMisp ToolService
  34. 34Create a tagMisp ToolService
  35. 35Delete a tagMisp ToolService
  36. 36Get many tagsMisp ToolService
  37. 37Update a tagMisp ToolService
  38. 38Create a userMisp ToolService
  39. 39Delete a userMisp ToolService
  40. 40Get a userMisp ToolService
  41. 41Get many usersMisp ToolService
  42. 42Update a userMisp ToolService
  43. 43Get a warninglistMisp ToolService
  44. 44Get many warninglistsMisp ToolService
  45. 45MISP Tool MCP ServerMcp triggerStarts it

How it's built

Starts on
An event in a connected app
Steps
45
Size
Large: read it before trusting it with anything live
Connects to
Nothing by connector; it calls services over plain HTTP
Model
None. This is plumbing, not judgement

Questions

What does it need to run?

An n8n account. You connect your own accounts after importing it; none are included.

What starts it?

It starts on an event in a connected app.

Does it use AI?

No. Every step is fixed logic or a call to a service, so it does the same thing every time.

How long does it take to set up?

Take your time. At 45 steps it is large: read it before trusting it with anything live.

How do I import it?

Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.

Before you run it

Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 45 steps before you point it at anything that matters.