io.github.aplaceforallmystuff/mcp-threatintel MCP Server

Name: io.github.aplaceforallmystuff/mcp-threatintel MCP Server
Author: io.github.aplaceforallmystuff

io.github.aplaceforallmystuff/mcp-threatintel

Repository Registry

What is the io.github.aplaceforallmystuff/mcp-threatintel MCP server?

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker

How to install io.github.aplaceforallmystuff/mcp-threatintel

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

OTX_API_KEY
secret
AlienVault OTX API key (free at otx.alienvault.com)
ABUSEIPDB_API_KEY
secret
AbuseIPDB API key (free at abuseipdb.com)
GREYNOISE_API_KEY
secret
GreyNoise API key (free at greynoise.io)
ABUSECH_AUTH_KEY
secret
abuse.ch Auth Key for URLhaus, MalwareBazaar, ThreatFox (free at auth.abuse.ch)

Claude Desktop

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp-threatintel": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-threatintel-server"
      ],
      "env": {
        "OTX_API_KEY": "<YOUR_OTX_API_KEY>",
        "ABUSEIPDB_API_KEY": "<YOUR_ABUSEIPDB_API_KEY>",
        "GREYNOISE_API_KEY": "<YOUR_GREYNOISE_API_KEY>",
        "ABUSECH_AUTH_KEY": "<YOUR_ABUSECH_AUTH_KEY>"
      }
    }
  }
}

Cursor

~/.cursor/mcp.json

{
  "mcpServers": {
    "mcp-threatintel": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-threatintel-server"
      ],
      "env": {
        "OTX_API_KEY": "<YOUR_OTX_API_KEY>",
        "ABUSEIPDB_API_KEY": "<YOUR_ABUSEIPDB_API_KEY>",
        "GREYNOISE_API_KEY": "<YOUR_GREYNOISE_API_KEY>",
        "ABUSECH_AUTH_KEY": "<YOUR_ABUSECH_AUTH_KEY>"
      }
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "mcp-threatintel": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-threatintel-server"
      ],
      "env": {
        "OTX_API_KEY": "<YOUR_OTX_API_KEY>",
        "ABUSEIPDB_API_KEY": "<YOUR_ABUSEIPDB_API_KEY>",
        "GREYNOISE_API_KEY": "<YOUR_GREYNOISE_API_KEY>",
        "ABUSECH_AUTH_KEY": "<YOUR_ABUSECH_AUTH_KEY>"
      }
    }
  }
}

VS Code

.vscode/mcp.json

{
  "servers": {
    "mcp-threatintel": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "mcp-threatintel-server"
      ],
      "env": {
        "OTX_API_KEY": "<YOUR_OTX_API_KEY>",
        "ABUSEIPDB_API_KEY": "<YOUR_ABUSEIPDB_API_KEY>",
        "GREYNOISE_API_KEY": "<YOUR_GREYNOISE_API_KEY>",
        "ABUSECH_AUTH_KEY": "<YOUR_ABUSECH_AUTH_KEY>"
      }
    }
  }
}

Claude Code

claude mcp add mcp-threatintel --env OTX_API_KEY=<YOUR_OTX_API_KEY> --env ABUSEIPDB_API_KEY=<YOUR_ABUSEIPDB_API_KEY> --env GREYNOISE_API_KEY=<YOUR_GREYNOISE_API_KEY> --env ABUSECH_AUTH_KEY=<YOUR_ABUSECH_AUTH_KEY> -- npx -y mcp-threatintel-server