BlackDome Threat Intel runs on your own machine — the client starts it, so there is no endpoint to ping. 548 installs a week from pypi. Last commit 7 Nov 2026.
Honeypot threat intel: IOCs, sample comparisons, evidence clusters and ThreatDrop case status.
Today is the operative word: we check BlackDome Threat Intel every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add blackdome-mcp -- uvx blackdome-mcp
{
"mcpServers": {
"blackdome-mcp": {
"command": "uvx",
"args": [
"blackdome-mcp"
]
}
}
}
[mcp_servers.blackdome-mcp]
command = "uvx"
args = ["blackdome-mcp"]
{
"mcpServers": {
"blackdome-mcp": {
"command": "uvx",
"args": [
"blackdome-mcp"
]
}
}
}
{
"servers": {
"blackdome-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"blackdome-mcp"
]
}
}
}
Optional settings from the registry entry, left out of the block above:
BLACKDOME_API_KEY (Optional Bearer API key. Free public tools work without it; paid tiers (credential intel, payloads, actors, warboard, STIX export) require a key. Get one at https://blackdome.ai/pricing), BLACKDOME_BASE_URL (API base URL (default https://api.blackdome.ai)), BLACKDOME_TIMEOUT (HTTP request timeout in seconds (default 15). Increase for large STIX/CSV exports).
Live honeypot threat intel: attacker IPs, IOCs, credentials, payloads, actors.
Read-only approved AI tools, public stacks, guides, and evidence-aware comparisons.
Evidence-based supplement guidance: clinical doses, form comparisons, interactions, cost-per-dose.
Local read-only cyber evidence integrity checks and aggregate comparison (alpha).
Analyze public domain names: naming features, structural value, RDAP/ICP evidence, and comparisons.
App Store + Google Play reviews: top complaints, what got worse by version, cross-store comparisons.
Read-only honeypot observations and evidence. Invite-only API key; request access on our website.
What users hate about ANY iOS/Android app: clustered complaints, evidence, trends. No key needed.
Answers built from our own checks of this server.