mcp-threatintel
About
Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker
Use this server
Add it to your MCP client. The catalogue lists this config verbatim from its source — it does not run, download, or vouch for the server. Review the command before you run it.
Transportstdio (runs a local command)
Env vars
OTX_API_KEY ABUSEIPDB_API_KEY GREYNOISE_API_KEY ABUSECH_AUTH_KEYClaude Code
claude mcp add --env OTX_API_KEY= --env ABUSEIPDB_API_KEY= --env GREYNOISE_API_KEY= --env ABUSECH_AUTH_KEY= mcp-threatintel -- npx mcp-threatintel-server
Cursor
If the button doesn't open Cursor, use the JSON below — Cursor accepts the same mcpServers config.
VS Code
code --add-mcp '{"name":"mcp-threatintel","command":"npx","args":["mcp-threatintel-server"],"env":{"OTX_API_KEY":"","ABUSEIPDB_API_KEY":"","GREYNOISE_API_KEY":"","ABUSECH_AUTH_KEY":""}}'
JSON
{
"mcpServers": {
"mcp-threatintel": {
"command": "npx",
"args": [
"mcp-threatintel-server"
],
"env": {
"OTX_API_KEY": "",
"ABUSEIPDB_API_KEY": "",
"GREYNOISE_API_KEY": "",
"ABUSECH_AUTH_KEY": ""
}
}
}
}
Environment variables are listed by name only — fill in your own values. Entries never carry secrets.