MISP Authentication Guide

How to authenticate MISP for use with Tines

Daniel Stoeski avatar
Written by Daniel Stoeski
Updated over a week ago

MISP Threat Sharing (MISP) is an open source threat intelligence platform. The project develops utilities and documentation for more effective threat intelligence, by sharing indicators of compromise.

First, get a MISP auth key

  1. Login to your MISP account

  2. Click "Administration" and then click "List Auth Keys"


  3. Click "+ Add authentication key"


  4. Add a descriptive comment, limit access to required IPs, and set an expiration date, then click "Submit"



  5. Copy your key to a text editor and click "I have noted down my key, take me back now"


Lastly, create a MISP credential in Tines

  1. Login to your Tines tenant

  2. Navigate to the team that will be using the API and click "Credentials"

  3. Click "+ New Credential" and select "Text"

  4. Input the values for the MISP credential

    1. Name: MISP

    2. Description: Optional

    3. Value: Your auth key

  5. Optional

    1. Domains: Ensure this credential can only be used when making HTTP requests to specific domains.

    2. Access: What other teams can also use the API

  6. Click "Save"

For more on creating credentials in Tines, click here.

You can find a selection of MISP stories in the story library

Did this answer your question?