A Python (FastAPI) based API gateway for MISP.

• To prevent adding false positives
• To enrich an event / attribute

The gateway works as a proxy for a MISP server. You can intercept a request to a MISP server and transform it as you want.

You can set transform functions for the following API endpoints.

• POST /events/add
• PUT /events/edit/{event_id}
• POST /events/edit/{event_id}
• POST /attributes/add/{event_id}
• PUT /attributes/edit/{attribute_id}
• POST /attributes/edit/{attribute_id}

You can use all other MISP API endpoints via the gateway. But note that a request is just proxied to a server.

• Installation
• Recipes