Security Checking Toolkit

Example Use Cases

• 1

  Verify whether a domain, URL, or IP is present in aggregated blacklist feeds before acting on or surfacing links.

• 2

  Enrich LLM reasoning with real-time threat context (blacklist status, per-source info, last update timestamps) via MCP calls.

• 3

  Batch scanning, sampling of blacklist entries, or administrative operations (add/remove entries, force updates, flush cache) programmatically.

Description

sec-mcp provides comprehensive security checks for domains, URLs and IP addresses by aggregating multiple blacklist feeds and offering fast, cached lookups backed by SQLite. It can run as a CLI tool, a Python library, or an MCP server so LLM clients (e.g., Claude, Windsurf, Cursor) can request real-time threat insights. The toolkit includes tools for batch checking, sampling blacklists, update scheduling, manual entry management, and health checks. It is designed for easy integration into applications and for enriching model context with up-to-date security data.