zettelforge

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents. Maintained by ThreatRecall on GitHub, where it has earned 58 stars from the community.

It's actively developed around claude-code, cti, llm, and is a solid reference for anyone building with these tools.