mcpbeat Sign in

BlackDome Threat Intel MCP Server

local only

BlackDome Threat Intel runs on your own machine — the client starts it, so there is no endpoint to ping. 548 installs a week from pypi. Last commit 7 Nov 2026.

Honeypot threat intel: IOCs, sample comparisons, evidence clusters and ThreatDrop case status.

Installs per day peak 404 · avg 35 · +286% w/w
a month agotoday
548
Installs / week
pypi · blackdome-mcp
1
Stars
0 open issues
7 Nov 2026
Last commit
from GitHub
MIT
License
Python

Nothing serious here today

Today is the operative word: we check BlackDome Threat Intel every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add blackdome-mcp -- uvx blackdome-mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "blackdome-mcp": {
      "command": "uvx",
      "args": [
        "blackdome-mcp"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.blackdome-mcp]
command = "uvx"
args = ["blackdome-mcp"]
.cursor/mcp.json
{
  "mcpServers": {
    "blackdome-mcp": {
      "command": "uvx",
      "args": [
        "blackdome-mcp"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "blackdome-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "blackdome-mcp"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: BLACKDOME_API_KEY (Optional Bearer API key. Free public tools work without it; paid tiers (credential intel, payloads, actors, warboard, STIX export) require a key. Get one at https://blackdome.ai/pricing), BLACKDOME_BASE_URL (API base URL (default https://api.blackdome.ai)), BLACKDOME_TIMEOUT (HTTP request timeout in seconds (default 15). Increase for large STIX/CSV exports).

Alternatives to BlackDome Threat Intel

same job, measured the same way
BlackDome Threat Intel
by blackdome-ai

Live honeypot threat intel: attacker IPs, IOCs, credentials, payloads, actors.

local only
One AI Guide
by oneaiguide

Read-only approved AI tools, public stacks, guides, and evidence-aware comparisons.

7 tools answering
Supplement Advisor MCP
by verifiedsupplementdata

Evidence-based supplement guidance: clinical doses, form comparisons, interactions, cost-per-dose.

53 installs/wk local only
BLACKPROOF Local MCP
by l0gfr

Local read-only cyber evidence integrity checks and aggregate comparison (alpha).

local only
AIYuCha Domain Intelligence
by sinianchu9

Analyze public domain names: naming features, structural value, RDAP/ICP evidence, and comparisons.

5 tools answering
App Store & Google Play Review Intelligence
by gunnargray-dev

App Store + Google Play reviews: top complaints, what got worse by version, cross-store comparisons.

answering
T
TheLeaf Threat Observatory
by theleaf-observatory

Read-only honeypot observations and evidence. Invite-only API key; request access on our website.

6 tools answering
App Pain API
by apppainapi

What users hate about ANY iOS/Android app: clustered complaints, evidence, trends. No key needed.

7 tools answering

BlackDome Threat Intel — questions

Answers built from our own checks of this server.

Why is there no uptime for BlackDome Threat Intel?
BlackDome Threat Intel runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package blackdome-mcp was installed 548 times last week.
How do I connect BlackDome Threat Intel?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls blackdome-mcp straight from pypi; nothing to host, nothing to sign up for.
How many people use BlackDome Threat Intel?
The pypi package blackdome-mcp was installed 548 times in the last week. Week over week that is +286%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is BlackDome Threat Intel open source?
Yes — it is published under the MIT licence, written in Python and 1 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.