Truss Threat Intelligence MCP Server

by truss-security Your server? Claim it

answering

Truss Threat Intelligence is answering right now. Last checked 14 min ago. Last commit 7 Aug 2026.

Query Truss threat intelligence via hosted MCP (OAuth). Growth+ plans.

Uptime history 48 days of history

48 days agonow

100.0%

Uptime 24h

91 of 91 checks

—

Tools

hidden behind auth

883 ms

Response time

average over 24h

Stars

last commit 7 Aug 2026

What the code does

We read the source, 22 h ago · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs an external command src/remote/validate-remote.ts:167

  const child = spawn(command, args, {

Dumps the whole environment src/lib/load-dotenv.ts:31

  const shellKeys = new Set(Object.keys(process.env));

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 14 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add truss-mcp --transport http https://api.truss-security.com/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "truss-mcp": {
      "url": "https://api.truss-security.com/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.truss-mcp]
url = "https://api.truss-security.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "truss-mcp": {
      "url": "https://api.truss-security.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "truss-mcp": {
      "url": "https://api.truss-security.com/mcp"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, but it did not say what kind of credentials it expects.

Endpoints

URL	Transport	State	Latency	Checked
https://api.truss-security.com/mcp	streamable-http	needs auth	717 ms	14 min ago

Alternatives to Truss Threat Intelligence

same job, measured the same way

Proofpoint

by wyre-technology

MCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.

local only

Proofpoint

by wyre-ai

MCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.

local only

Tubemind Secure MCP

by dewtech-technologies

Secure MCP server for YouTube intelligence — 18 tools, OAuth2, OWASP Top 10 controls.

31 installs/wk local only

Ansvar: EU Compliance & Legal Intelligence

by ansvar

Cited EU & global law, regulations & security frameworks via Ansvar Gateway. OAuth, free + paid.

answering

NYC Property & Venue API

by matchuplabs

NYC property intelligence, building violations, and restaurant/venue compliance via MCP.

41 installs/wk local only

Vigo MCP

by 365xbusiness

AI-powered Hong Kong SFC regulatory intelligence. Bilingual EN/ZH compliance queries.

10 tools answering

DB Conn MCP

by idle-sync

A dead-simple, self-hosted MCP server for securely querying databases via AI agents.

430 installs/wk local only

Coderegistry

by hellosg

Enterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free.

23 tools answering

Truss Threat Intelligence — questions

Answers built from our own checks of this server.

Why is there no tool list for Truss Threat Intelligence?

The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 100.0% of checks in the last 24 hours got a reply.

Is Truss Threat Intelligence working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 883 ms. The bar chart above shows every period we have measured.

How do I connect Truss Threat Intelligence?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You will need your own credentials: it refuses anonymous clients.

Does Truss Threat Intelligence need an API key?

Yes. Every time we knock, Truss Threat Intelligence answers with an authorization challenge instead of its tool list — that is how we know it is running and gated rather than broken. Bring your own credentials and it will talk.

How fast is Truss Threat Intelligence?

It answers our handshake in 883 ms on average, which is faster than 11% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Truss Threat Intelligence open source?

Yes — it is published under the MIT licence, written in TypeScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.