Darknet MCP Server
Unclaimed66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onion access, malware analysis, blockchain intel, exploit search, stealer logs
Install
npx darknet-mcp-serverUnclaimed listing
Is this your MCP server?
This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.
Claim this serverTools (40)
abuseipdb_blacklist
Get AbuseIPDB's blacklist of the most reported malicious IP addresses
abuseipdb_check
Check an IP address for abuse reports — confidence score, ISP, country, report count
abuseipdb_reports
Get individual abuse reports for an IP with detailed comments and categories
bazaarHash
Look up a malware sample in MalwareBazaar by MD5, SHA1, or SHA256 hash
bazaarRecent
Get the most recently submitted malware samples from MalwareBazaar
bazaarTag
Search MalwareBazaar by tag or YARA signature name
breachDataClasses
List all data classes (types of compromised data) known to HIBP — free
breachGet
Get details of a specific data breach by name — free
breachLatest
Get the most recently added data breach — free
breachList
List all known data breaches from HaveIBeenPwned, optionally filter by domain — free
breachPassword
Check if a password has appeared in known breaches (k-anonymity, only 5-char SHA-1 prefix sent) — free
breachPastes
Search for an email address in publicly posted pastes — requires HIBPAPIKEY
breachSearch
Search all breaches for a specific account (email/username) — requires HIBPAPIKEY
otx_cve
Look up threat intelligence for a CVE — related pulses and indicators
otx_domain
Look up threat intelligence for a domain — pulse info, whois, reputation
otx_hash
Look up threat intelligence for a file hash (MD5, SHA1, SHA256)
otx_ip
Look up threat intelligence for an IP address — pulse info, reputation, country, ASN
otx_search_pulses
Search OTX threat pulses by keyword
ransomlookGroups
List all 582+ ransomware groups tracked by RansomLook
ransomlookRecent
Fetch the most recent ransomware posts and victim claims from RansomLook
ransomwareByCountry
Get ransomware victims filtered by ISO 3166-1 alpha-2 country code
ransomwareBySector
Get ransomware victims filtered by sector/industry (healthcare, finance, etc.)
ransomwareGroup
Get a detailed profile for a specific ransomware group by name
ransomwareGroups
List all known ransomware groups tracked by ransomware.live
ransomwareGroupVictims
Get all victims claimed by a specific ransomware group
ransomwareRecent
Fetch the most recent ransomware victims from ransomware.live
ransomwareSearch
Search ransomware victims by keyword (company name, domain, etc.)
threatfoxGetIocs
Get recent IOCs from ThreatFox reported in the last N days
threatfoxMalware
Search ThreatFox IOCs by malware family using Malpedia naming
threatfoxSearch
Search ThreatFox IOCs by IP, domain, hash, or URL
threatfoxTag
Search ThreatFox IOCs by tag (e.g., Cobalt Strike, Emotet)
tor_exit_check
Check if a specific IP address is a known Tor exit node
tor_exit_details
Get detailed Tor exit node information including fingerprints and publish timestamps
tor_exit_nodes
Get current Tor exit node IP addresses from the official Tor Project bulk exit list
tor_fetch_onion
Fetch raw HTML from a .onion URL via Tor SOCKS5 proxy (DNS leak prevention via socks5h)
tor_scrape_onion
Fetch and parse a .onion site — returns structured data: title, links, body text
tor_search_onion
Search for .onion sites using Ahmia.fi search engine
tor_status
Check if the local Tor SOCKS5 proxy daemon is running and accessible
urlhausLookup
Look up a URL or host in URLhaus for malware distribution
urlhausTag
Search URLhaus entries by tag