How do I connect MCP Threatintel MCP Server to Claude?

Run `claude mcp add aplaceforallmystuff-mcp-threatintel -- npx -y mcp-threatintel-server` in Claude Code, or add the same command and arguments under mcpServers in Cursor's mcp.json or Claude Desktop's claude_desktop_config.json, then restart the client. The blocks above are ready to paste.

Is MCP Threatintel MCP Server free?

The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.

What can MCP Threatintel MCP Server do?

MCP Threatintel MCP Server documents 17 tools to the agent, including abuseipdb_check, feodo_tracker, greynoise_ip. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.

MCP Threatintel

Unclaimed

by aplaceforallmystuff

MCP server for unified threat intelligence - AlienVault OTX, AbuseIPDB, GreyNoise, and abuse.ch feeds

Set up this server

Compare servers My Stack

01 / Choose your client

02 / Before you connect

Authentication is not specified. Check the project instructions before connecting.

Install the runtime required by the project and make it available to your client.

Project instructionsEnvironment variable names (optional)

Use names from the project instructions, separated by commas. Enter names only, never secret values.

03 / Add the configuration

Source: generated from public install instructions

claude mcp add --transport stdio 'aplaceforallmystuff-mcp-threatintel' -- 'npx' '-y' 'mcp-threatintel-server'

Run in your terminal after replacing any placeholders.

04 / Check it in your client

Open your client’s MCP settings and confirm the server connects and lists its tools. A copied configuration does not confirm a working connection.

claudecybersecuritymcpmcp-servermodel-context-protocolosintthreat-intelligenceclaude-codesecurity

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Security profile

Claimed and verified servers get a weekly static scan that shows what the code can reach: external services, environment variables, shell commands, agent configuration folders, plus any dependencies with known advisories. Claim this listing to get one. How the security profile works

17 of 17 tools

Documented tools (17)

From project documentation. A server handshake does not verify each tool’s description or behavior.

abuseipdb_check

Check IP reputation and abuse history

feodo_tracker

Get active botnet C2 servers (QakBot, Emotet, Dridex, etc.)

greynoise_ip

Check if IP is internet noise or targeted threat

malwarebazaar_hash

Look up malware sample by hash

malwarebazaar_recent

Get recent malware samples

malwarebazaar_tag

Search samples by tag

otx_get_pulses

Get recent threat intelligence pulses

otx_search_pulses

Search pulses by keyword

threatfox_iocs

Get recent IOCs from ThreatFox

threatfox_search

Search ThreatFox IOCs

threatintel_lookup_domain

Look up domain across all configured sources

threatintel_lookup_hash

Look up file hash (MD5/SHA1/SHA256) across sources

threatintel_lookup_ip

Look up IP across all configured sources

threatintel_lookup_url

Look up URL across sources

threatintel_status

Check which threat intelligence sources are configured

urlhaus_lookup

Look up URL, domain, or IP in URLhaus

urlhaus_recent

Get recent malware URLs

Tool change history

Compared across complete checks of the same configuration. Tools were listed, not invoked. Input-schema changes are not measured here.

No complete tool checks yet.

FAQ

Questions about MCP Threatintel MCP Server

How do I connect MCP Threatintel MCP Server to Claude?: Run `claude mcp add aplaceforallmystuff-mcp-threatintel -- npx -y mcp-threatintel-server` in Claude Code, or add the same command and arguments under mcpServers in Cursor's mcp.json or Claude Desktop's claude_desktop_config.json, then restart the client. The blocks above are ready to paste.
Is MCP Threatintel MCP Server free?: The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
What can MCP Threatintel MCP Server do?: MCP Threatintel MCP Server documents 17 tools to the agent, including abuseipdb_check, feodo_tracker, greynoise_ip. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.