How to integrate IBM X-Force Exchange MCP with Atomic Agent

Atomic Agent is an open-source AI agent that runs on your machine and supports local models through llama.cpp. Connect it to 1,500+ apps through Composio, including IBM X-Force Exchange.

This guide uses Atomic Agent's built-in Composio integration. You need Atomic Agent v0.5.6 or later, your own Composio API key, and a IBM X-Force Exchange account. See the Atomic Agent documentation for installation instructions.

How Atomic Agent connects to IBM X-Force Exchange

Atomic Agent connects to Composio's Tool Router over Streamable HTTP MCP. It discovers the tools needed for your request, and Composio handles account authentication.

Execution and account-connection tools follow Atomic Agent's configured approval policy. Review any approval prompt before allowing an action on your connected account.

Connect IBM X-Force Exchange to Atomic Agent

1. Sign up or sign in to the Composio dashboard. Copy your API key.
2. In Atomic Agent, open the Integrations tab and select Composio. Select API key, press e, paste the key, and press Enter. The tools become available immediately, without a restart.
3. Ask Atomic Agent to do something in IBM X-Force Exchange. It searches Composio for the right tool.
4. On first use, open the sign-in link returned in the chat. Connect your IBM X-Force Exchange account, then return to Atomic Agent to continue.

Headless setup

Add the following line to ~/.atomic-agent/.env, replacing YOUR_COMPOSIO_API_KEY with your key. Start Atomic Agent after saving the file.

The IBM X-Force Exchange MCP server is an implementation of the Model Context Protocol that connects your AI agent and assistants like Claude, Cursor, etc directly to your IBM X-Force Exchange account. It provides structured and secure access to public threat intelligence collections, your user profile, reputation categories, and platform version information, so your agent can review recent collections, inspect your profile, retrieve IP and URL categories, and check the current API version on your behalf.

• Public threat intelligence research: Have your agent retrieve the latest public collections to review shared cybersecurity findings and emerging threat insights.
• Complete collection discovery: Direct your agent to gather all available public collections when you need broader threat intelligence research.
• Reputation category reference: Let the agent retrieve IP reputation and URL category lists to support threat classification work.
• Account profile lookup: Instruct your agent to fetch your authenticated IBM X-Force Exchange profile information.
• Account and version checks: Have your agent generate a new API key and password pair or check the platform's current API version.

Use IBM X-Force Exchange from Atomic Agent

With your account connected, ask Atomic Agent to work with IBM X-Force Exchange in natural language. You can connect more apps through the same Composio integration as you need them.

Visit the Atomic Agent website or inspect the Atomic Agent source code.