MCP Threatintel MCP Server

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add mcp-threatintel -- npx -y mcp-threatintel-server

{
  "mcpServers": {
    "mcp-threatintel": {
      "args": [
        "-y",
        "mcp-threatintel-server"
      ],
      "command": "npx"
    }
  }
}

[mcp_servers.mcp-threatintel]
command = "npx"
args = ["-y", "mcp-threatintel-server"]

{
  "mcpServers": {
    "mcp-threatintel": {
      "args": [
        "-y",
        "mcp-threatintel-server"
      ],
      "command": "npx"
    }
  }
}

{
  "mcpServers": {
    "mcp-threatintel": {
      "args": [
        "-y",
        "mcp-threatintel-server"
      ],
      "command": "npx"
    }
  }
}

This one needs environment variables set before it will start: OTX_API_KEY (AlienVault OTX API key (free at otx.alienvault.com)), ABUSEIPDB_API_KEY (AbuseIPDB API key (free at abuseipdb.com)), GREYNOISE_API_KEY (GreyNoise API key (free at greynoise.io)), ABUSECH_AUTH_KEY (abuse.ch Auth Key for URLhaus, MalwareBazaar, ThreatFox (free at auth.abuse.ch)). The author declared them in the registry entry; get the values from the project itself.