Intelthreadlinqs MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 88 installs a week from npm. Last commit 24 Aug 2026.
Threadlinqs threat-intelligence MCP — 49 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs
Today is the operative word: we check Intelthreadlinqs MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add intelthreadlinqs-mcp -e 'THREADLINQS_API_KEY=<THREADLINQS_API_KEY>' -- npx -y intelthreadlinqs-mcp
{
"mcpServers": {
"intelthreadlinqs-mcp": {
"command": "npx",
"args": [
"-y",
"intelthreadlinqs-mcp"
],
"env": {
"THREADLINQS_API_KEY": "<THREADLINQS_API_KEY>"
}
}
}
}
[mcp_servers.intelthreadlinqs-mcp]
command = "npx"
args = ["-y", "intelthreadlinqs-mcp"]
env = { THREADLINQS_API_KEY = "<THREADLINQS_API_KEY>" }
{
"mcpServers": {
"intelthreadlinqs-mcp": {
"command": "npx",
"args": [
"-y",
"intelthreadlinqs-mcp"
],
"env": {
"THREADLINQS_API_KEY": "<THREADLINQS_API_KEY>"
}
}
}
}
{
"servers": {
"intelthreadlinqs-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"intelthreadlinqs-mcp"
],
"env": {
"THREADLINQS_API_KEY": "<THREADLINQS_API_KEY>"
}
}
}
}
Put your own value in place of
<THREADLINQS_API_KEY> (Threadlinqs API key (Purple or Gold tier, tl_...) — get one at https://intel.threadlinqs.com/profile).
The author’s registry entry marks it as required.
Optional settings from the registry entry, left out of the block above:
THREADLINQS_API_URL (Override the API base URL (defaults to https://intel.threadlinqs.com)).
Threadlinqs threat-intelligence MCP — 73 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs
Threat intelligence: enrich IOCs (IP, domain, URL, hash), search CVEs and actors, scan SBOMs.
On-device Apple Intelligence as MCP tools for macOS — OCR, tables, entity detection, generation.
Pulsedive MCP — threat-intelligence IOC enrichment (pulsedive.com)
Solana on-chain intelligence — token scans, wallet profiling, bundle detection, 19 MCP tools.
Code intelligence MCP server: impact analysis, dependency graphs, dead code detection.
35 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API.
Crypto risk intelligence: 19 tools for rug pull detection, AI forensics, and token analysis.
Answers built from our own checks of this server.