{"name":"com.ismalicious/mcp-server","slug":"ismalicious-mcp-server","title":"isMalicious threat intelligence for AI agents","description":"Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans","url":"https://mcp.market/server/ismalicious-mcp-server","rating":null,"grade":"B","score":82,"certified":false,"status":"active","category":"email","tags":["email"],"presence":{"score":28,"stars":0,"forks":0,"downloads_week":87,"last_push_at":"2026-10-05T13:25:01.000Z","license":"MIT"},"uptime":{"percent":96,"checks":28,"ok":27,"last_checked_at":"2026-11-05T09:25:45.009Z","last_ok_at":"2026-11-05T09:25:45.009Z","latency_ms":889},"claimed":false,"transport":"mixed","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/hexablob/ismalicious-mcp-server","website":"https://ismalicious.com/prompt-injection-scanner","version":"0.8.0","remotes":[{"type":"streamable-http","url":"https://api.ismalicious.com/mcp","headers":[{"description":"Bearer <apiKey>:<apiSecret>, the key pair from https://ismalicious.com/app/account. Every tool but check_password_exposure (local only) and bootstrap_key.","isRequired":true,"isSecret":true,"name":"Authorization"}]}],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@ismalicious/mcp-server","version":"0.8.0","transport":{"type":"stdio"},"environmentVariables":[{"description":"API key from https://ismalicious.com/app/account. Optional: without it the server starts in bootstrap mode and offers bootstrap_key.","isSecret":true,"name":"ISMALICIOUS_API_KEY"},{"description":"API secret paired with the key","isSecret":true,"name":"ISMALICIOUS_API_SECRET"},{"description":"API base URL (defaults to https://ismalicious.com/api; https://api.ismalicious.com reaches the API host directly)","name":"ISMALICIOUS_API_BASE"},{"description":"Replaces every tool's timeout, in milliseconds (defaults: gate 15000, check_indicator 25000, CVE and exploited_cves 10000, search_indicators 20000, check_indicators 60000, check_password_exposure 10000, scan_email 20000, watch_domain 30000, watch_dependencies 45000, ack_finding 10000). ISMALICIOUS_TIMEOUT_<TOOL>_MS, e.g. ISMALICIOUS_TIMEOUT_CHECK_INDICATOR_MS, sets one tool's timeout and wins over it","name":"ISMALICIOUS_TIMEOUT_MS"},{"description":"Base URL for bootstrap_key, a route only https://ismalicious.com/api serves (defaults to ISMALICIOUS_API_BASE, or https://ismalicious.com/api when that is api.ismalicious.com)","name":"ISMALICIOUS_WEB_BASE"},{"description":"Result cache: 0 turns it off; N caps every tool's cache lifetime at N seconds (never raises one)","name":"ISMALICIOUS_CACHE_TTL_S"},{"description":"0 (or false, off, no) skips the one unauthenticated GET /health sent after initialize to open the connection","name":"ISMALICIOUS_PREWARM"}]}],"tools":[],"scan":null,"grade_history":[{"kind":"restore","fromGrade":"C","toGrade":"B","reason":"score 82","createdAt":"2026-10-16T17:07:14.687Z"}],"reviews":[]}