MCP Threat Intel Server

Example Use Cases

• 1

  Unified lookups of IPs, domains, hashes, and URLs across multiple threat intelligence sources.

• 2

  Reduce context switching by accessing multiple intel sources in a single response.

• 3

  Correlate threat intelligence data from various platforms for security research and incident response.

Description

This MCP server enables querying IPs, domains, file hashes, and URLs across various threat intelligence platforms simultaneously, reducing context switching and correlating intelligence in one response. It supports multiple sources including AlienVault OTX, AbuseIPDB, GreyNoise, and abuse.ch projects, with some tools working without API keys. The server is free tier friendly and dynamically enables tools based on provided API keys, facilitating efficient threat analysis and incident response.