← Back to browse

mcp-threatintel

About

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker

Use this server

Add it to your MCP client. The catalogue lists this config verbatim from its source — it does not run, download, or vouch for the server. Review the command before you run it.

Transportstdio (runs a local command)
Env varsOTX_API_KEY ABUSEIPDB_API_KEY GREYNOISE_API_KEY ABUSECH_AUTH_KEY
Claude Code
claude mcp add --env OTX_API_KEY= --env ABUSEIPDB_API_KEY= --env GREYNOISE_API_KEY= --env ABUSECH_AUTH_KEY= mcp-threatintel -- npx mcp-threatintel-server
Cursor

Add to Cursor

If the button doesn't open Cursor, use the JSON below — Cursor accepts the same mcpServers config.

VS Code
code --add-mcp '{"name":"mcp-threatintel","command":"npx","args":["mcp-threatintel-server"],"env":{"OTX_API_KEY":"","ABUSEIPDB_API_KEY":"","GREYNOISE_API_KEY":"","ABUSECH_AUTH_KEY":""}}'
JSON
{
  "mcpServers": {
    "mcp-threatintel": {
      "command": "npx",
      "args": [
        "mcp-threatintel-server"
      ],
      "env": {
        "OTX_API_KEY": "",
        "ABUSEIPDB_API_KEY": "",
        "GREYNOISE_API_KEY": "",
        "ABUSECH_AUTH_KEY": ""
      }
    }
  }
}

Environment variables are listed by name only — fill in your own values. Entries never carry secrets.