Honeypot threat intel: IOCs, sample comparisons, evidence clusters and ThreatDrop case status.
Connect Runs on your machine
claude mcp add blackdome-mcp -e BLACKDOME_API_KEY=<BLACKDOME_API_KEY> -e BLACKDOME_BASE_URL=<BLACKDOME_BASE_URL> -e BLACKDOME_TIMEOUT=<BLACKDOME_TIMEOUT> -- uvx blackdome-mcp==0.4.0
{
"mcpServers": {
"blackdome-mcp": {
"command": "uvx",
"args": [
"blackdome-mcp==0.4.0"
],
"env": {
"BLACKDOME_API_KEY": "<BLACKDOME_API_KEY>",
"BLACKDOME_BASE_URL": "<BLACKDOME_BASE_URL>",
"BLACKDOME_TIMEOUT": "<BLACKDOME_TIMEOUT>"
}
}
}
}
{
"mcpServers": {
"blackdome-mcp": {
"command": "uvx",
"args": [
"blackdome-mcp==0.4.0"
],
"env": {
"BLACKDOME_API_KEY": "<BLACKDOME_API_KEY>",
"BLACKDOME_BASE_URL": "<BLACKDOME_BASE_URL>",
"BLACKDOME_TIMEOUT": "<BLACKDOME_TIMEOUT>"
}
}
}
}
{
"servers": {
"blackdome-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"blackdome-mcp==0.4.0"
],
"env": {
"BLACKDOME_API_KEY": "<BLACKDOME_API_KEY>",
"BLACKDOME_BASE_URL": "<BLACKDOME_BASE_URL>",
"BLACKDOME_TIMEOUT": "<BLACKDOME_TIMEOUT>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
BLACKDOME_API_KEYOptional, secret | Optional Bearer API key. Free public tools work without it; paid tiers (credential intel, payloads, actors, warboard, STIX export) require a key. Get one at https://blackdome.ai/pricing |
BLACKDOME_BASE_URLOptional | API base URL (default https://api.blackdome.ai). |
BLACKDOME_TIMEOUTOptional | HTTP request timeout in seconds (default 15). Increase for large STIX/CSV exports. |
Details
| Package | [email protected] (PYPI, stdio) |
| First published | 7 Nov 2026 |
| Last updated | 7 Nov 2026 |
| Registry name | io.github.blackdome-ai/blackdome-mcp |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
