MCP Endpoint

MCP (Model Context Protocol) Endpoint integrations let ThreatStream Next Gen send PIR findings and updates directly to the tools your team already works in. They appear as their own source type in the Integrations Marketplace, alongside Feeds, Intelligence Channels, Enrichment, Integrations, and Entity Sources, and can be enabled on individual PIRs once configured.

Each MCP Endpoint is enabled from its tile in the Integrations Marketplace, where you name the connection, provide the MCP server URL, and authenticate (via token or OAuth, depending on the vendor). Once configured, the integration can be turned on for individual PIRs so their results are delivered automatically.

Available MCP Endpoint Integrations

Integration	Description
Jira MCP	Sends PIR results to public Slack channels or direct messages, so stakeholders stay informed without needing to log in to ThreatStream Next Gen.
Slack MCP	Automatically creates Jira tickets from PIR findings and notifies the relevant Jira users, turning intelligence findings into tracked work items.