mcp-threatintel

pete-builds/mcp-threatintel
★ 2 stars Python Database Updated 2d ago
Threat intelligence MCP server for Claude Code. IOC lookups, CVE checks, breach monitoring, dark web search, and OTX pulses.
View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mcp-threatintel": {
      "command": "uvx",
      "args": [
        "mcp-threatintel"
      ]
    }
  }
}

Or install with pip: pip install mcp-threatintel

README Excerpt

A threat intelligence MCP server for [Claude Code](https://claude.com/claude-code). Gives Claude tools to look up IOCs, search threat feeds, check breached credentials, query CVEs, and search the dark web. Built with [FastMCP](https://github.com/jlowin/fastmcp) and SQLite. Feeds are synced locally by a background poller so lookups are fast and don't depend on external API availability.

Tools (16)

ABUSECH_API_KEYHIBP_API_KEYLEAKCHECK_API_KEYOTX_API_KEYcheck_breachcheck_domain_breachescheck_email_breachescheck_password_breachget_feed_statusget_latest_breachget_recent_threatslookup_cvelookup_iocsearch_darkwebsearch_pulsessearch_threats

Topics

claude-codecvefastmcpmcpotxsecuritythreat-intelligence
📊
Working with market or time-series data?
The Polymarket Historical Dataset — 18.5M+ price snapshots across 18,600+ prediction markets (CSV + SQLite). Built for backtesting & ML.
View dataset →