NestDaddy
All servers NestDaddy MCP Blog Sign inTry it free
Security

Mcp Threatintel

io.github.aplaceforallmystuff/mcp-threatintel ยท v1.0.1

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker

Source code Set it up

Connect Runs on your machine

Terminal
claude mcp add mcp-threatintel -e OTX_API_KEY=<OTX_API_KEY> -e ABUSEIPDB_API_KEY=<ABUSEIPDB_API_KEY> -e GREYNOISE_API_KEY=<GREYNOISE_API_KEY> -e ABUSECH_AUTH_KEY=<ABUSECH_AUTH_KEY> -- npx -y [email protected]
claude_desktop_config.json
{
  "mcpServers": {
    "mcp-threatintel": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "OTX_API_KEY": "<OTX_API_KEY>",
        "ABUSEIPDB_API_KEY": "<ABUSEIPDB_API_KEY>",
        "GREYNOISE_API_KEY": "<GREYNOISE_API_KEY>",
        "ABUSECH_AUTH_KEY": "<ABUSECH_AUTH_KEY>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "mcp-threatintel": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "OTX_API_KEY": "<OTX_API_KEY>",
        "ABUSEIPDB_API_KEY": "<ABUSEIPDB_API_KEY>",
        "GREYNOISE_API_KEY": "<GREYNOISE_API_KEY>",
        "ABUSECH_AUTH_KEY": "<ABUSECH_AUTH_KEY>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "mcp-threatintel": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "OTX_API_KEY": "<OTX_API_KEY>",
        "ABUSEIPDB_API_KEY": "<ABUSEIPDB_API_KEY>",
        "GREYNOISE_API_KEY": "<GREYNOISE_API_KEY>",
        "ABUSECH_AUTH_KEY": "<ABUSECH_AUTH_KEY>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
OTX_API_KEY
Optional, secret		AlienVault OTX API key (free at otx.alienvault.com)
ABUSEIPDB_API_KEY
Optional, secret		AbuseIPDB API key (free at abuseipdb.com)
GREYNOISE_API_KEY
Optional, secret		GreyNoise API key (free at greynoise.io)
ABUSECH_AUTH_KEY
Optional, secret		abuse.ch Auth Key for URLhaus, MalwareBazaar, ThreatFox (free at auth.abuse.ch)

Details

Package[email protected] (NPM, stdio)
First published28 Nov 2025
Last updated28 Nov 2025
Registry nameio.github.aplaceforallmystuff/mcp-threatintel

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.