Recorded Future has launched the Model Context Protocol (MCP), a new tool that provides AI agents and LLM workflows direct access to over 80 intelligence tools from its Intelligence Graph®. This launch aims to enhance the decision-making capabilities of security teams by integrating trusted intelligence into their agentic workflows.
TL;DR
- Recorded Future's MCP is now generally available, offering AI agents direct access to its intelligence tools.
- Over 80 tools are available, including threat actor profiles, ransomware metadata, and dark web intelligence.
- MCP is designed to improve agent decision-making, reduce response times, and enhance the efficiency of security operations.
What happened
Recorded Future has announced the general availability of its Model Context Protocol (MCP), a new protocol that connects AI agents to Recorded Future's Intelligence Graph®. This protocol provides AI agents with direct, standardized, OAuth-authenticated access to a comprehensive catalog of intelligence tools.
The MCP includes access to more than 80 tools, which expose a broad set of capabilities from across the Recorded Future Platform. These tools enable agents to perform tasks such as threat actor profiling, risk scoring, and malware analysis. Additionally, agents can write to Watch Lists and author Platform Analyst Notes, enhancing their ability to act on intelligence.
The MCP is designed to be token-efficient, allowing agents to retrieve the necessary information in fewer calls. This reduces cost and latency as agentic workflows scale. The protocol is accessible via the Integration Center and supports OAuth 2.0 for persistent access.
Why it matters
The launch of MCP is significant for AI/ML developers and startup founders as it provides a new way to integrate trusted intelligence into AI agents. This can enhance the decision-making capabilities of agents, making them more reliable and efficient in security operations.
For tech investors, the MCP represents a strategic move by Recorded Future to extend its intelligence capabilities to the growing field of agentic security operations. This could position the company as a key player in the AI-driven security market.
However, the success of MCP will depend on its adoption by security teams and the effectiveness of the intelligence tools it provides. While the initial feedback from pilot customers is positive, the long-term impact of MCP remains to be seen.
Key facts
- Recorded Future MCP is now generally available.
- MCP provides direct access to over 80 intelligence tools.
- Tools include threat actor profiles, ransomware metadata, malware sandbox data, and dark web intelligence.
- Agents can write to Watch Lists and author Platform Analyst Notes.
- MCP is designed to be token-efficient, reducing cost and latency.
- The protocol is accessible via the Integration Center and supports OAuth 2.0.
- Over 100 enterprise customers field-tested MCP through a pilot program.
- MCP is included for customers whose subscriptions include unlimited integration users.
Context
Recorded Future has been a trusted intelligence provider for over 15 years, primarily serving human analysts. The launch of MCP extends this role to AI agents, reflecting the growing trend of automating security operations.
The use of AI by threat actors has increased, necessitating a shift in how security teams operate. AI agents and copilots are becoming more prevalent, and tools like MCP aim to enhance their effectiveness.
The MCP is part of Recorded Future's broader AI strategy, which includes the Recorded Future AI assistant and workspace. The company plans to announce the next phase of its AI journey soon.