Home › Security › mcp-threatintel

mcp-threatintel

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker

TypeScript

★ 10 stars Last pushed 2026-11-05 License: MIT

View repository →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (npm 1.0.1)

npx -y [email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "mcp-threatintel": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "OTX_API_KEY": "<YOUR_VALUE>",
        "ABUSEIPDB_API_KEY": "<YOUR_VALUE>",
        "GREYNOISE_API_KEY": "<YOUR_VALUE>",
        "ABUSECH_AUTH_KEY": "<YOUR_VALUE>"
      }
    }
  }
}

OTX_API_KEY secret — AlienVault OTX API key (free at otx.alienvault.com)
ABUSEIPDB_API_KEY secret — AbuseIPDB API key (free at abuseipdb.com)
GREYNOISE_API_KEY secret — GreyNoise API key (free at greynoise.io)
ABUSECH_AUTH_KEY secret — abuse.ch Auth Key for URLhaus, MalwareBazaar, ThreatFox (free at auth.abuse.ch)