How do I connect Honeylabs MCP Server to Claude?

The project does not publish a launch command that MCPVault could verify. Open the repository linked on this page for its install steps; the listing names Claude Desktop, Claude Code, Cursor as compatible clients.

Is Honeylabs MCP Server free?

The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.

What can Honeylabs MCP Server do?

Honeylabs MCP Server documents 8 tools to the agent, including asn_enrich, attack_timeline, cve_lookup. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.

Honeylabs MCP

Unclaimed

by honeylabshq

HoneyLabs MCP server — query 90 days of honeypot probe data from Claude, Cursor, Gemini, Cline. Free tier 500 credits/day.

Set up this server

Compare servers My Stack

This server needs project-specific setup. Follow the project instructions; no reusable public launch command is available yet.

Project instructions

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Security profile

Claimed and verified servers get a weekly static scan that shows what the code can reach: external services, environment variables, shell commands, agent configuration folders, plus any dependencies with known advisories. Claim this listing to get one. How the security profile works

8 of 8 tools

Documented tools (8)

From project documentation. A server handshake does not verify each tool’s description or behavior.

asn_enrich

Full profile for an ASN: total events, unique IPs, top ports, source countries, user-agents, org name.

attack_timeline

Hourly / daily attack volume over a window, with protocol / country / port filters.

cve_lookup

Who is probing a named CVE: severity, KEV status, top probing IPs with ASN and scanner tag, fingerprints, sample paths, daily timeline.

fingerprint_search

Search by TLS JA4 / JA3 / HTTP JA4H / SSH HASSH fingerprint to find shared infrastructure.

ioc_lookup

Is this IP / domain known to be probing? Returns our verdict, whether it is a recognised benign scanner, the CVEs it probed, plus ports / paths / fingerprints.

payload_search

Full-text URL-path + user-agent search across attack traffic.

search_events

Raw honeypot events matching filters (IP, ASN, country, destport, protocol, httpmethod, ja4/ja3, communityid, hasclientcert).

top_attackers

Ranked leaderboard of source IPs, ASNs, countries, ports, user-agents, or CVEs (by='cve') over a time window.

Tool change history

Compared across complete checks of the same configuration. Tools were listed, not invoked. Input-schema changes are not measured here.

No complete tool checks yet.

FAQ

Questions about Honeylabs MCP Server

How do I connect Honeylabs MCP Server to Claude?: The project does not publish a launch command that MCPVault could verify. Open the repository linked on this page for its install steps; the listing names Claude Desktop, Claude Code, Cursor as compatible clients.
Is Honeylabs MCP Server free?: The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
What can Honeylabs MCP Server do?: Honeylabs MCP Server documents 8 tools to the agent, including asn_enrich, attack_timeline, cve_lookup. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.