1. Conduid
  2. Files
  3. Threat Intelligence MCP
MCP server · Files

Threat Intelligence MCP

· github.com/Jam0k/Threat-Intelligence-MCP

MCP server for the ThreatCluster threat intelligence API: incident clusters, IOCs, CVEs, ransomware leak-site victims and entity profiles as tools for Claude, Cursor, VS Code and any MCP client. Python and npm.

Unclaimed claudecticursorcvecyber-threat-intelligencedark-webiocllm-toolsmcpmcp-servermodel-context-protocolpythonransomwaresecuritythreat-intelligencetypescript
InstallView source
34Low

Scored a month ago · breakdown

About Threat Intelligence MCP

Threat Intelligence MCP is an MCP server in the Files category: mCP server for the ThreatCluster threat intelligence API: incident clusters, IOCs, CVEs, ransomware leak-site victims and entity profiles as tools for Claude, Cursor, VS Code and any MCP client. Python and npm.

Install

From source
git clone https://github.com/Jam0k/Threat-Intelligence-MCP

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (10)

api_budgetRemaining credits and rate state from the last responses — no API call

Parameters not published.

exploited_vulnerabilitiesCVEs in a window filtered to KEV / public exploit / severity / vendor / product

Parameters not published.

get_threatFull record for one cluster: summary, timeline, articles, entities; `include_iocs` adds validated indicators

Parameters not published.

get_vulnerabilityOne CVE: CVSS, EPSS, KEV with due date, exploits, vendors, products

Parameters not published.

leak_site_victimsRansomware leak-site listings by sector / group / country / victim, plus a tally of the whole window

Parameters not published.

lookup_entityProfile of an actor, malware, tool, vendor, product, country, industry or CVE

Parameters not published.

newest_threatsWhat is new in 1h / 24h / 7d / 30d, by first report or by momentum

Parameters not published.

search_everythingClusters, entity profiles and dark-web hits in one call

Parameters not published.

search_threatsKeyword search over incident clusters; phrase, then all words, then any word; `matched_stage` says which

Parameters not published.

trending_entitiesActors, malware, tools, vendors, CVEs, countries rising over a window

Parameters not published.

Ask AI

✦

Ask AI about Threat Intelligence MCP

Powered by Claude · Grounded in docs

I know everything about Threat Intelligence MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Threat Intelligence MCP

How do I install Threat Intelligence MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Threat Intelligence MCP safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Threat Intelligence MCP still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.