Darknet MCP Server
未认领66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onion access, malware analysis, blockchain intel, exploit search, stealer logs
01 / 选择客户端
03 / 添加配置
claude mcp add --transport stdio 'darknet-mcp-server' -- 'npx' '-y' 'darknet-mcp-server'04 / 在客户端中确认
打开客户端的 MCP 设置，确认服务器已连接并列出工具。复制配置不代表连接成功。
更多Search & Web服务器
浏览完整目录安全概况
已认领和已认证的服务器每周接受一次静态扫描，显示代码能触及的范围（外部服务、环境变量、shell 命令、代理配置目录）以及带有已知公告的依赖。认领此列表即可获得。 安全概况的工作原理
40 个工具中显示 40 个
文档中列出的工具 (40)
内容来自项目文档。服务器握手不会验证每个工具的说明或行为。
abuseipdb_blacklist
Get AbuseIPDB's blacklist of the most reported malicious IP addresses
abuseipdb_check
Check an IP address for abuse reports — confidence score, ISP, country, report count
abuseipdb_reports
Get individual abuse reports for an IP with detailed comments and categories
bazaarHash
Look up a malware sample in MalwareBazaar by MD5, SHA1, or SHA256 hash
bazaarRecent
Get the most recently submitted malware samples from MalwareBazaar
bazaarTag
Search MalwareBazaar by tag or YARA signature name
breachDataClasses
List all data classes (types of compromised data) known to HIBP — free
breachGet
Get details of a specific data breach by name — free
breachLatest
Get the most recently added data breach — free
breachList
List all known data breaches from HaveIBeenPwned, optionally filter by domain — free
breachPassword
Check if a password has appeared in known breaches (k-anonymity, only 5-char SHA-1 prefix sent) — free
breachPastes
Search for an email address in publicly posted pastes — requires HIBPAPIKEY
breachSearch
Search all breaches for a specific account (email/username) — requires HIBPAPIKEY
otx_cve
Look up threat intelligence for a CVE — related pulses and indicators
otx_domain
Look up threat intelligence for a domain — pulse info, whois, reputation
otx_hash
Look up threat intelligence for a file hash (MD5, SHA1, SHA256)
otx_ip
Look up threat intelligence for an IP address — pulse info, reputation, country, ASN
otx_search_pulses
Search OTX threat pulses by keyword
ransomlookGroups
List all 582+ ransomware groups tracked by RansomLook
ransomlookRecent
Fetch the most recent ransomware posts and victim claims from RansomLook
ransomwareByCountry
Get ransomware victims filtered by ISO 3166-1 alpha-2 country code
ransomwareBySector
Get ransomware victims filtered by sector/industry (healthcare, finance, etc.)
ransomwareGroup
Get a detailed profile for a specific ransomware group by name
ransomwareGroups
List all known ransomware groups tracked by ransomware.live
ransomwareGroupVictims
Get all victims claimed by a specific ransomware group
ransomwareRecent
Fetch the most recent ransomware victims from ransomware.live
ransomwareSearch
Search ransomware victims by keyword (company name, domain, etc.)
threatfoxGetIocs
Get recent IOCs from ThreatFox reported in the last N days
threatfoxMalware
Search ThreatFox IOCs by malware family using Malpedia naming
threatfoxSearch
Search ThreatFox IOCs by IP, domain, hash, or URL
threatfoxTag
Search ThreatFox IOCs by tag (e.g., Cobalt Strike, Emotet)
tor_exit_check
Check if a specific IP address is a known Tor exit node
tor_exit_details
Get detailed Tor exit node information including fingerprints and publish timestamps
tor_exit_nodes
Get current Tor exit node IP addresses from the official Tor Project bulk exit list
tor_fetch_onion
Fetch raw HTML from a .onion URL via Tor SOCKS5 proxy (DNS leak prevention via socks5h)
tor_scrape_onion
Fetch and parse a .onion site — returns structured data: title, links, body text
tor_search_onion
Search for .onion sites using Ahmia.fi search engine
tor_status
Check if the local Tor SOCKS5 proxy daemon is running and accessible
urlhausLookup
Look up a URL or host in URLhaus for malware distribution
urlhausTag
Search URLhaus entries by tag