OT Intel API

{
  "mcpServers": {
    "io.github.No3men60/ot-intel-api": {
      "url": "https://ot-intel-api.onrender.com/mcp"
    }
  }
}

Indexed tools

Tool metadata and schemas come from the remote server and are untrusted. Indexing only lists tools; it never calls them.

25 shown · authentication unknown

• Remediation Action Risk Gate

  getActionConformance

  Deterministic auto_approve/human_review/reject verdict for a planned remediation action (block_ip, quarantine_host, halt_pipeline, etc.) against an actor/sector/region context. Built on the same capability x opportunity x intent scoring as /ot/threat-score, with auditable rules layered on top — no LLM in the decision path. auto_approve requires vendor_stack; omitting it caps the verdict at human_review regardless of score. Price: $0.12 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

  Schema valid · SHA-256 949440e36ff0…

  View input schema

  {
    "type": "object",
    "properties": {
      "actor": {
        "type": "string",
        "description": "ICS threat actor name e.g. SANDWORM, VOLTZITE, XENOTIME"
      },
      "sector": {
        "type": "string",
        "description": "Target sector e.g. energy, water, manufacturing"
      },
      "region": {
        "type": "string",
        "description": "Target region e.g. GCC, KSA, UAE, Europe"
      },
      "planned_action": {
        "type": "string",
        "enum": [
          "block_ip",
          "block_domain",
          "quarantine_host",
          "isolate_segment",
          "halt_pipeline",
          "disable_account"
        ],
        "description": "The remediation action being gated"
      },
      "asset_context": {
        "type": "string",
        "description": "Optional free text, e.g. 'shared_infra:cloudflare' — escalates to human_review when shared cloud/CDN infra is detected"
      },
      "vendor_stack": {
        "type": "string",
        "description": "Comma-separated vendor list e.g. 'Schneider Modicon,Siemens SIMATIC'. REQUIRED for auto_approve to be reachable at all; omitting it caps the verdict at human_review."
      }
    },
    "required": [
      "actor",
      "sector",
      "region",
      "planned_action"
    ],
    "additionalProperties": false
  }