MISP Project

CTI Transmute

Convert Cyber Threat Intelligence data between MISP and STIX formats. Open-source REST API maintained by the MISP Project community.

Start Converting
GitHub API
Recent Public Converts
View all
No public conversions yet.
API Endpoints

Click a card to navigate, or call the endpoints directly via the REST API.

MISP to STIX POST

Convert a MISP event into a STIX 2.0 or 2.1 bundle.
STIX to MISP POST

Import a STIX bundle back to MISP event format.
List Converters GET

Browse all available conversion operations.
Activity
No public activity yet.
[[ item.actor_name ]] [[ eventVerb(item.event_type) ]] [[ item.target_name ]]
[[ reactionKey(item.details) ]] [[ timeAgo(item.created_at) ]]
Demo

Watch a walkthrough of CTI-Transmute covering the main features and usage.

CTI-Transmute demo video

Presented at FIRST-CTI 2026 in Munich.

Open Source
Maintained by the MISP Project community
REST API
Automate conversions via simple HTTP endpoints
Standards
STIX 2.0 & 2.1 · MISP Standard Format