Live threat intel for agents: incidents, actors, CVEs with KEV/EPSS, ransomware leak-site victims.
Connect Remote server
claude mcp add --transport http threatcluster https://threatcluster.io/mcp --header "X-API-Key: <X_API_KEY>"
{
"mcpServers": {
"threatcluster": {
"url": "https://threatcluster.io/mcp",
"headers": {
"X-API-Key": "<X_API_KEY>"
}
}
}
}
{
"servers": {
"threatcluster": {
"type": "http",
"url": "https://threatcluster.io/mcp",
"headers": {
"X-API-Key": "<X_API_KEY>"
}
}
}
}
Settings > Connectors > Add custom connector
URL: https://threatcluster.io/mcp
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server asks for a key before it lists its tools. Connect it with your own key to see them.
Headers
| Name | Description |
|---|---|
X-API-KeyRequired, secret | ThreatCluster API key. Free keys: https://threatcluster.io/api |
Details
| Endpoint | https://threatcluster.io/mcp (Streamable HTTP) |
| Package | [email protected] (NPM, stdio) |
| First published | 26 Sep 2026 |
| Last updated | 26 Sep 2026 |
| Registry name | io.github.Jam0k/threatcluster |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
