SERVER

MCP Threatintel

Rank #23,988

io.github.aplaceforallmystuff/mcp-threatintel

MCP server providing threatintel capabilities

2 versions

9 GitHub stars

by aplaceforallmystuff (12 servers)View repository ↗

Listed & last published

Nov 28, 2025

PURPOSE

What you can do with MCP Threatintel

MCP Threatintel is a Model Context Protocol (MCP) server published by aplaceforallmystuff. It ranks #23,988 of 144,396 active servers on MCP Toplist, and its repository has 9 GitHub stars. MCP Threatintel is listed across 3 registries — Official MCP, PulseMCP and Glama, with 2 tracked versions. It was first listed on Nov 28, 2025 and most recently updated on Nov 28, 2025.

Not verifiedMCP Toplist has not yet written a checked profile for this server, so the paragraph above is assembled from registry data only. The repository README is the authority on what it does.

CAPABILITIES AND LIMITATIONS

What MCP Threatintel can and cannot do

Not verifiedMCP Toplist has not catalogued this server's tools or limitations. The repository README lists them.

REQUIREMENTS

What you need before using MCP Threatintel

DeclaredNo credentialsNo credentials declared

The registry listing declares no required environment variables or authentication. This is declared metadata, not a verified install — the repository README is the authority.

Declared by Glama, last synced Oct 16, 2026. Not independently verified by MCP Toplist.

Declared in the registry install config

OTX_API_KEY · optional
ABUSEIPDB_API_KEY · optional
GREYNOISE_API_KEY · optional
ABUSECH_AUTH_KEY · optional

INSTALLATION AND FIRST TASK

Connect MCP Threatintel and confirm it works

npm package

claude mcp add mcp-threatintel -e "OTX_API_KEY=<your OTX_API_KEY>" -e "ABUSEIPDB_API_KEY=<your ABUSEIPDB_API_KEY>" -e "GREYNOISE_API_KEY=<your GREYNOISE_API_KEY>" -e "ABUSECH_AUTH_KEY=<your ABUSECH_AUTH_KEY>" -- npx -y mcp-threatintel-server

Replace each placeholder with your own value before saving.

npm package

[mcp_servers.mcp-threatintel]
command = "npx"
args = ["-y", "mcp-threatintel-server"]

[mcp_servers.mcp-threatintel.env]
OTX_API_KEY = "<your OTX_API_KEY>"
ABUSEIPDB_API_KEY = "<your ABUSEIPDB_API_KEY>"
GREYNOISE_API_KEY = "<your GREYNOISE_API_KEY>"
ABUSECH_AUTH_KEY = "<your ABUSECH_AUTH_KEY>"

Add to ~/.codex/config.toml. Replace each placeholder with your own value before saving.

npm package

{
  "mcpServers": {
    "mcp-threatintel": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-threatintel-server"
      ],
      "env": {
        "OTX_API_KEY": "<your OTX_API_KEY>",
        "ABUSEIPDB_API_KEY": "<your ABUSEIPDB_API_KEY>",
        "GREYNOISE_API_KEY": "<your GREYNOISE_API_KEY>",
        "ABUSECH_AUTH_KEY": "<your ABUSECH_AUTH_KEY>"
      }
    }
  }
}

Add to claude_desktop_config.json (Settings → Developer → Edit Config). Replace each placeholder with your own value before saving.

npm package

{
  "mcpServers": {
    "mcp-threatintel": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-threatintel-server"
      ],
      "env": {
        "OTX_API_KEY": "<your OTX_API_KEY>",
        "ABUSEIPDB_API_KEY": "<your ABUSEIPDB_API_KEY>",
        "GREYNOISE_API_KEY": "<your GREYNOISE_API_KEY>",
        "ABUSECH_AUTH_KEY": "<your ABUSECH_AUTH_KEY>"
      }
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). Replace each placeholder with your own value before saving.

npm package

{
  "servers": {
    "mcp-threatintel": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "mcp-threatintel-server"
      ],
      "env": {
        "OTX_API_KEY": "<your OTX_API_KEY>",
        "ABUSEIPDB_API_KEY": "<your ABUSEIPDB_API_KEY>",
        "GREYNOISE_API_KEY": "<your GREYNOISE_API_KEY>",
        "ABUSECH_AUTH_KEY": "<your ABUSECH_AUTH_KEY>"
      }
    }
  }
}

Save as .vscode/mcp.json in your workspace. Replace each placeholder with your own value before saving.

npm package

{
  "mcpServers": {
    "mcp-threatintel": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-threatintel-server"
      ],
      "env": {
        "OTX_API_KEY": "<your OTX_API_KEY>",
        "ABUSEIPDB_API_KEY": "<your ABUSEIPDB_API_KEY>",
        "GREYNOISE_API_KEY": "<your GREYNOISE_API_KEY>",
        "ABUSECH_AUTH_KEY": "<your ABUSECH_AUTH_KEY>"
      }
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json. Replace each placeholder with your own value before saving.

npm package

{
  "mcpServers": {
    "mcp-threatintel": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-threatintel-server"
      ],
      "env": {
        "OTX_API_KEY": "<your OTX_API_KEY>",
        "ABUSEIPDB_API_KEY": "<your ABUSEIPDB_API_KEY>",
        "GREYNOISE_API_KEY": "<your GREYNOISE_API_KEY>",
        "ABUSECH_AUTH_KEY": "<your ABUSECH_AUTH_KEY>"
      }
    }
  }
}

Replace each placeholder with your own value before saving.

First successful task

After adding the config, ask your client to list this server's tools. A tool list confirms the connection; an empty list or an error means the server did not start or needs credentials.

ALTERNATIVES

When to choose another server

Other servers by aplaceforallmystuff

View all aplaceforallmystuff servers →

No task-specific alternatives are catalogued for MCP Threatintelyet; the list above is its publisher's other servers.

MAINTENANCE AND EVIDENCE

What changed, and when this was checked

First listed: Nov 28, 2025
Latest version published: Nov 28, 2025
Version history: 2 versions tracked (below)
Requirements evidence: Declared by Glama, last synced Oct 16, 2026. Not independently verified by MCP Toplist.
Profile checked: Not yet — purpose, capabilities and requirements above come from registry data only
Ranking data as of: Oct 16, 2026

Registry sightings

Official MCP ↗listed since Apr 25, 2026 · still listed
PulseMCP ↗listed since Jun 4, 2026 · still listed
Glama ↗listed since Jun 4, 2026 · still listed

Do you maintain MCP Threatintel? to correct or enrich this profile.

VERSIONS

Available versions (2)

Version	Published
1.0.1	Nov 28, 2025
0.1.0	Nov 25, 2024

STANDING

#23,988of 144,396 active serversTop 25%

Ranks ahead of 120,408 of 144,396 servers on MCP Toplist.

BADGE

Show your rank

Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.

Markdown

[![MCP Toplist](https://mcptoplist.com/badge/io.github.aplaceforallmystuff%2Fmcp-threatintel.svg)](https://mcptoplist.com/server/io.github.aplaceforallmystuff%2Fmcp-threatintel)

HTML

<a href="https://mcptoplist.com/server/io.github.aplaceforallmystuff%2Fmcp-threatintel"><img src="https://mcptoplist.com/badge/io.github.aplaceforallmystuff%2Fmcp-threatintel.svg" alt="MCP Toplist: Top 25% of 144,396" /></a>

Variants: append ?metric=score or ?metric=stars to the image URL.

FAQ

Frequently asked questions

Who maintains MCP Threatintel?: MCP Threatintel is maintained by aplaceforallmystuff, which publishes 12 MCP servers (10 total versions) tracked on MCP Toplist.
Is MCP Threatintel listed on the Official MCP Registry?: Yes — MCP Threatintel is listed on the Official MCP Registry, alongside PulseMCP and Glama.
How many versions does MCP Threatintel have?: MCP Toplist tracks 2 versions of MCP Threatintel, most recently published on Nov 28, 2025.
Where can I find the source code for MCP Threatintel?: The source code for MCP Threatintel is hosted at github.com/aplaceforallmystuff/mcp-threatintel.

Used in projects

Do you run this server?

Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.

EXPLORE

All MCP Servers Official MCP Servers GitHub MCP Servers Best MCP Servers Most Active MCP Servers New MCP Servers Best New MCP Servers