Threatcheck runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 10 Nov 2026.
Check URLs, indicators and CVEs against threat intelligence before you act on them.
Nothing serious here today
Today is the operative word: we check Threatcheck every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add threatcheck -- npx -y @reneturcios/threatcheck{
"mcpServers": {
"threatcheck": {
"command": "npx",
"args": [
"-y",
"@reneturcios/threatcheck"
]
}
}
}[mcp_servers.threatcheck]
command = "npx"
args = ["-y", "@reneturcios/threatcheck"]{
"mcpServers": {
"threatcheck": {
"command": "npx",
"args": [
"-y",
"@reneturcios/threatcheck"
]
}
}
}{
"servers": {
"threatcheck": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@reneturcios/threatcheck"
]
}
}
}Alternatives to Threatcheck
same job, measured the same wayThreat-intelligence verdicts on a URL, domain or IP before a coding agent connects to it.
MCP server for AlienVault OTX threat intelligence: indicators, pulses, search, and users.
Threat-intelligence verdicts on a URL, domain or IP before a coding agent connects to it.
Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.
Reversibility intelligence — check if actions can be undone before executing them.
Threat intelligence for AI agents: checks URLs, domains, phones, emails, wallets and IBANs for scams
Threadlinqs threat-intelligence MCP — 49 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs
Threadlinqs threat-intelligence MCP — 73 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs
Threatcheck — questions
Answers built from our own checks of this server.