---
title: "corrobore"
description: "Portable skills and MCP tools for using Corrobore as evidence-backed structured working memory and CTI validation substrate."
canonical: https://agentpluginsdirectory.com/plugins/corrobore
last-updated: 2026-09-25
---

# corrobore
Portable skills and MCP tools for using Corrobore as evidence-backed structured working memory and CTI validation substrate.
- Slug: corrobore
- Publisher: Estance-Labs
- Repository: https://github.com/Estance-Labs/corrobore
- Manifest: plugins/corrobore/plugin.json
- Version: 0.2.0
- License: MIT
- Category (editorial): agent-tooling
- Skills: 2 (corrobore, opencti-intel-harvester)
- MCP servers: 1 (corrobore)
- Stars: 1
- Repository created: 2026-07-21
- Repository last pushed: 2026-09-22
- Publisher type: Organization
- Listing: https://agentpluginsdirectory.com/plugins/corrobore
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## What corrobore does, in the publisher's words

This directory is the portable Corrobore package for Agent Plugins v1.0.0. It gives compatible agents evidence-first operating guidance plus an MCP bridge to a running Corrobore HTTP service.

mcp.json starts a zero-dependency Node.js process over standard input and output. The process is a portable bridge to Corrobore's documented HTTP API; it is not an embedded database and does not present the Rust engine itself as a native MCP implementation.

- Node.js 20 or newer must be available as node on PATH.
- A Corrobore HTTP runtime must be reachable. The default base URL is http://127.0.0.1:8080.
- The Agent Plugin client must support portable stdio MCP servers.

The command uses ${PLUGIN_ROOT} and has no operating-system-specific launcher, package manager, or shell syntax. The same extracted package can therefore run on macOS, Linux, and Windows when Node.js is available.

From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/Estance-Labs/corrobore/HEAD/plugins/corrobore/README.md

## Skills

- corrobore: Use Corrobore as external structured working memory for CTI, FIMI, crisis, and cross-domain investigations with focused reads, evidence-backed candidate ingestion, and audited verdicts.
- opencti-intel-harvester: Extract grounded cyber threat intelligence from supplied reports with Corrobore and return exactly one deterministic, validated STIX 2.1 bundle.

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.

## MCP servers

- corrobore: transport: stdio; command: node ${PLUGIN_ROOT}/mcp-server/server.mjs

Read from the plugin's own mcp.json. Environment variable names only, never values.