Threatist

Connect Remote server

claude mcp add --transport http threatist https://threatist.io/mcp

{
  "mcpServers": {
    "threatist": {
      "url": "https://threatist.io/mcp"
    }
  }
}

{
  "servers": {
    "threatist": {
      "type": "http",
      "url": "https://threatist.io/mcp"
    }
  }
}

Settings > Connectors > Add custom connector
URL: https://threatist.io/mcp

Tools 5 found in our last check

• get_advisory

  A Red Hat RHSA or Microsoft KB or ADV with its CVEs and records.

• get_vendor

  A vendor's records, highest priority first. Takes the same filters as search_vulnerabilities.

• get_vulnerability

  A record for a TI id or an alias such as a CVE or GHSA id. Merged ids give the surviving record. By default the record is shortened: no CPE matches, at most 20 references (exploits and patches first) and the 10 newest advisories; trimmed says what was cut.

• list_exploited

  Recent additions to CISA's Known Exploited Vulnerabilities catalogue. Newest first, each with its Threatist record.

• search_vulnerabilities

  Records matching a text and filters, a page at a time. Pass next as cursor for the next page.

Details

More security servers See all

• BlackVeil DNS & Email Security Scanner

  DNS and email security scanner with 82 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.

• Forwardsmith buyer desk (read-only)

  Read-only desk for buyers and assistants: offer, prices, fit check, readiness scan, intake draft.

• MakeItSay

  Change the words in a screenshot or photo and keep the original font and layout.

• Kestrova Solidity Security Scan

  Free Slither scan of Solidity contracts for AI coding agents; optional paid report (1 USDC, x402).

• Paragon Boxing & BJJ Gear Advisor

  Read-only boxing and BJJ gear guidance, sizing, product comparison, rules and identity checks.

• Spurvik EU AI Act

  Live URL scan, AI Act risk check, 24-EU-language Art. 50 badge, HMAC receipts & approval gates.