# IBM X-Force Exchange — how to use (mcp.ai)

Connect your IBM X-Force Exchange account and use 7 tools for security and identity straight from your AI agent. Connect with your own API key. IBM X-Force Exchange is a threat intelligence sharing platform for researching security threats, aggregating intelligence, and collaborating on cybersecurity insights.

## Option A — via MCP (recommended)
Remote MCP endpoint (HTTP, streamable): `https://api.mcp.ai/p_ibm_x_force_exchange?ms=1787291400000`
Add it as a custom/remote MCP connector in your client (Claude, Cursor, VS Code…), then authenticate when prompted. Once connected, ask the agent to use the server's tools (e.g. `ibm_x_force_exchange_get_casefiles_public`).

## Option B — via direct REST API
Base URL: `https://api.mcp.ai/api/ibm_x_force_exchange`
Auth: `Authorization: Bearer sk_live_…` — create a workspace API key at https://mcp.ai/settings/api-keys
Discover endpoints: `GET https://api.mcp.ai/api/ibm_x_force_exchange/_endpoints`

### Endpoints
- `POST https://api.mcp.ai/api/ibm_x_force_exchange/get/casefiles/public` — Tool to retrieve latest public Collections from IBM X-Force Exchange. Use when you need to access publicly available collections without pagination. For fetching all public collections, consider using
- `POST https://api.mcp.ai/api/ibm_x_force_exchange/get/casefiles/public/paginated` — Tool to retrieve all public Collections using pagination from IBM X-Force Exchange. Use when you need to access publicly available collections with pagination support. Returns a list of publicly acces
  - body: { skip?: integer, limit?: integer }
- `POST https://api.mcp.ai/api/ibm_x_force_exchange/get/ipr/categories` — Tool to retrieve the complete list of IP reputation categories from IBM X-Force Exchange. Use when you need to understand available IPR classification categories used by XFE.
- `POST https://api.mcp.ai/api/ibm_x_force_exchange/get/url/categories` — Tool to retrieve the complete list of URL categories from IBM X-Force Exchange. Use when you need to understand available URL classification categories used by XFE.
- `POST https://api.mcp.ai/api/ibm_x_force_exchange/get/userprofile` — Tool to retrieve authenticated user's profile information from IBM X-Force Exchange. Use when you need to access user account details, membership statistics, or integration configurations.
- `POST https://api.mcp.ai/api/ibm_x_force_exchange/get/version` — Tool to retrieve current running API version information from IBM X-Force Exchange. Use when you need to check the API version, build number, or creation date.
- `POST https://api.mcp.ai/api/ibm_x_force_exchange/post/auth/api/key` — Tool to generate a new API key and password pair for IBM X-Force Exchange authentication. Use when you need to create new credentials for API access. The generated credentials do not expire and can be
  - body: { name?: string }

## Example prompts
- "What can I do in IBM X-Force Exchange?"
- "Show me a summary of my IBM X-Force Exchange account"

## More
- Page: https://mcp.ai/ibm_x_force_exchange
- Agent spec (llms.txt): https://mcp.ai/ibm_x_force_exchange/llms.txt
- Postman collection: https://mcp.ai/ibm_x_force_exchange/postman.json