SERVER

Threatfox

Rank #28879

glama/pipeworx-io/mcp-threatfox

ThreatFox abuse.ch indicator-of-compromise feed for querying malware IOCs, threat actors, and malicious infrastructure via Pipeworx.

First listed
May 12, 2026
Last publish date
May 12, 2026
OVERVIEW

Threatfox is a Model Context Protocol (MCP) server published by pipeworx-io. It ranks #28879 of 58,900 servers tracked on MCP Toplist. Threatfox is listed across 3 registries — Official MCP, PulseMCP and Glama, with 1 tracked version. It was first listed on May 12, 2026 and most recently updated on May 12, 2026.

STANDING
#28,879of 58,900 tracked serversTop 50%

Ranks ahead of 30,021 of 58,900 servers on MCP Toplist.

CONNECT

Use Threatfox

Add Threatfox to any MCP client (Claude, Cursor, VS Code, …) with one of the configs below.

Remote · HTTP
{
  "mcpServers": {
    "mcp-threatfox": {
      "url": "https://gateway.pipeworx.io/threatfox/mcp"
    }
  }
}
REGISTRIES

Listed on 3 registries

ORGANIZATION

pipeworx-io

Organization
Total servers
578
Total versions
440
MORE FROM THIS PUBLISHER

Other servers by pipeworx-io

View all pipeworx-io servers →
VERSIONS

Available versions (1)

VersionPublished
0.1.0May 12, 2026
FAQ

Frequently asked questions

What is Threatfox?
ThreatFox abuse.ch indicator-of-compromise feed for querying malware IOCs, threat actors, and malicious infrastructure via Pipeworx.
Who maintains Threatfox?
Threatfox is maintained by pipeworx-io, which publishes 578 MCP servers (440 total versions) tracked on MCP Toplist.
Is Threatfox an official MCP server?
Yes — Threatfox is listed on the Official MCP Registry, alongside PulseMCP and Glama.
How many versions does Threatfox have?
MCP Toplist tracks 1 version of Threatfox, most recently published on May 12, 2026.
Where can I find the source code for Threatfox?
The source code for Threatfox is hosted at github.com/pipeworx-io/mcp-threatfox.
EXPLORE
Threatfox - MCP Server #28879 | MCP Toplist