MCP Threatintel
未认领MCP server for unified threat intelligence - AlienVault OTX, AbuseIPDB, GreyNoise, and abuse.ch feeds
01 / 选择客户端
03 / 添加配置
claude mcp add --transport stdio 'aplaceforallmystuff-mcp-threatintel' -- 'npx' '-y' 'mcp-threatintel-server'04 / 在客户端中确认
打开客户端的 MCP 设置，确认服务器已连接并列出工具。复制配置不代表连接成功。
更多Security服务器
浏览完整目录安全概况
已认领和已认证的服务器每周接受一次静态扫描，显示代码能触及的范围（外部服务、环境变量、shell 命令、代理配置目录）以及带有已知公告的依赖。认领此列表即可获得。 安全概况的工作原理
17 个工具中显示 17 个
文档中列出的工具 (17)
内容来自项目文档。服务器握手不会验证每个工具的说明或行为。
abuseipdb_check
Check IP reputation and abuse history
feodo_tracker
Get active botnet C2 servers (QakBot, Emotet, Dridex, etc.)
greynoise_ip
Check if IP is internet noise or targeted threat
malwarebazaar_hash
Look up malware sample by hash
malwarebazaar_recent
Get recent malware samples
malwarebazaar_tag
Search samples by tag
otx_get_pulses
Get recent threat intelligence pulses
otx_search_pulses
Search pulses by keyword
threatfox_iocs
Get recent IOCs from ThreatFox
threatfox_search
Search ThreatFox IOCs
threatintel_lookup_domain
Look up domain across all configured sources
threatintel_lookup_hash
Look up file hash (MD5/SHA1/SHA256) across sources
threatintel_lookup_ip
Look up IP across all configured sources
threatintel_lookup_url
Look up URL across sources
threatintel_status
Check which threat intelligence sources are configured
urlhaus_lookup
Look up URL, domain, or IP in URLhaus
urlhaus_recent
Get recent malware URLs