{"name":"io.github.aplaceforallmystuff/mcp-threatintel","slug":"aplaceforallmystuff-mcp-threatintel","title":null,"description":"Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker","url":"https://mcp.market/server/aplaceforallmystuff-mcp-threatintel","rating":null,"grade":"B","score":78,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":19,"stars":8,"forks":1,"downloads_week":null,"last_push_at":"2026-08-12T20:20:45.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/aplaceforallmystuff/mcp-threatintel","website":null,"version":"1.0.1","remotes":[],"packages":[{"registryType":"npm","identifier":"mcp-threatintel-server","version":"1.0.1","transport":{"type":"stdio"},"environmentVariables":[{"description":"AlienVault OTX API key (free at otx.alienvault.com)","format":"string","isSecret":true,"name":"OTX_API_KEY"},{"description":"AbuseIPDB API key (free at abuseipdb.com)","format":"string","isSecret":true,"name":"ABUSEIPDB_API_KEY"},{"description":"GreyNoise API key (free at greynoise.io)","format":"string","isSecret":true,"name":"GREYNOISE_API_KEY"},{"description":"abuse.ch Auth Key for URLhaus, MalwareBazaar, ThreatFox (free at auth.abuse.ch)","format":"string","isSecret":true,"name":"ABUSECH_AUTH_KEY"}]}],"tools":[{"name":"abuseipdb_check","description":"Check IP reputation on AbuseIPDB - returns abuse confidence score and recent reports","write_action":false,"price_micros":0,"input_schema":null},{"name":"feodo_tracker","description":"Get active botnet C2 servers from Feodo Tracker (Emotet, Dridex, QakBot, etc.)","write_action":false,"price_micros":0,"input_schema":null},{"name":"greynoise_ip","description":"Check if an IP is internet background noise or a targeted threat (GreyNoise)","write_action":false,"price_micros":0,"input_schema":null},{"name":"malwarebazaar_hash","description":"Look up malware sample by hash on MalwareBazaar","write_action":false,"price_micros":0,"input_schema":null},{"name":"malwarebazaar_recent","description":"Get recent malware samples from MalwareBazaar","write_action":false,"price_micros":0,"input_schema":null},{"name":"malwarebazaar_tag","description":"Get malware samples by tag (e.g., 'emotet', 'cobalt-strike', 'ransomware')","write_action":false,"price_micros":0,"input_schema":null},{"name":"otx_get_pulses","description":"Get recent threat intelligence pulses from AlienVault OTX","write_action":false,"price_micros":0,"input_schema":null},{"name":"otx_search_pulses","description":"Search OTX pulses by keyword (malware name, campaign, threat actor)","write_action":false,"price_micros":0,"input_schema":null},{"name":"threatfox_iocs","description":"Get recent IOCs from ThreatFox (C2 servers, malware infrastructure)","write_action":false,"price_micros":0,"input_schema":null},{"name":"threatfox_search","description":"Search ThreatFox for IOCs by malware family or tag","write_action":false,"price_micros":0,"input_schema":null},{"name":"threatintel_lookup_domain","description":"Look up a domain across threat intelligence sources (OTX, URLhaus)","write_action":false,"price_micros":0,"input_schema":null},{"name":"threatintel_lookup_hash","description":"Look up a file hash (MD5, SHA1, SHA256) across threat intelligence sources (OTX, MalwareBazaar)","write_action":false,"price_micros":0,"input_schema":null},{"name":"threatintel_lookup_ip","description":"Look up an IP address across all configured threat intelligence sources (OTX, AbuseIPDB, GreyNoise, Feodo Tracker)","write_action":false,"price_micros":0,"input_schema":null},{"name":"threatintel_lookup_url","description":"Look up a URL for malware/phishing indicators (OTX, URLhaus)","write_action":false,"price_micros":0,"input_schema":null},{"name":"threatintel_status","description":"Check which threat intelligence sources are configured. Currently available: …","write_action":false,"price_micros":0,"input_schema":null},{"name":"urlhaus_lookup","description":"Check if a URL or domain is distributing malware (URLhaus)","write_action":false,"price_micros":0,"input_schema":null},{"name":"urlhaus_recent","description":"Get recent malware URLs from URLhaus","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":78,"grade":"B","scanned_at":"2026-10-01T23:12:19.000Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-01T23:12:18.919Z","components":{"code":{"score":25,"max":25,"notes":["3 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":12,"max":15,"notes":["last push 50 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"mcp-threatintel-server","version":"1.0.1","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":1,"publishedAt":"2025-11-28T14:40:44.925Z","repositoryUrl":"git+https://github.com/aplaceforallmystuff/mcp-threatintel.git"}],"repo":{"found":true,"owner":"aplaceforallmystuff","repo":"mcp-threatintel","archived":false,"pushedAt":"2026-08-12T20:20:45Z","stars":8,"forks":1,"openIssues":5,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/4331738?v=4","ownerCreatedAt":"2013-05-03T13:48:25Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/4331738?v=4&s=128","source":"github"},"presence":{"stars":8,"forks":1,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-08-12T20:20:45.000Z","score":19}}}},"grade_history":[],"reviews":[]}