Nullcone Threat Intelligence
Rank #135,903smithery/maco144/nullcone
Real-time threat intelligence for AI agents — 900K+ IOCs including prompt-injection payloads and malicious AI-skill (MCP tool) indicators. Free, no API key. Check IPs, domains, URLs, hashes, CVEs, **prompt-injection payloads**, and **malicious AI-skill / MCP-tool definitions** against the live Nullcone network. Hosted over streamablecHTTP — nothing to install. ## Connect claude mcp add --transport http nullcone https://nullcone.ai/mcp Or point any MCP client at `https://nullcone.ai/mcp`. ## What you get - `lookup_ioc` — check any indicator against the feed - `recent_threats` — current threat picture - `submit_ioc` / `submit_batch` — contribute indicators - `check_prompt` — sub-millisecond prompt-injection lookup - `validate_skill` / `scan_skill_content` — vet MCP tools and AI skills before loading - `poll_since` — incremental sync, no persistent connection - 30+ tools total, plus resources (`threat://recent`, `threat://stats`) and analysis prompts No signup required. Reads and submissions are open; destructive tools are disabled on the public endpoint.
What you can do with Nullcone Threat Intelligence
Nullcone Threat Intelligence is a Model Context Protocol (MCP) server. It ranks #135,903 of 166,322 active servers on MCP Toplist. Nullcone Threat Intelligence is listed on Smithery; no version information is available from the registries that list it or from its repository. It was first listed on Jun 7, 2026.
Not verifiedMCP Toplist has not yet written a checked profile for this server, so the paragraph above is assembled from registry data only. Its registry listings below are the authority on what it does.
What Nullcone Threat Intelligence can and cannot do
Not verifiedMCP Toplist has not catalogued this server's tools or limitations. Check its registry listings below.
What you need before using Nullcone Threat Intelligence
The hosted endpoint is declared as gated by authentication — connect via its URL and authenticate with the provider (OAuth flow or an API key/header, per its docs).
Declared by Smithery, last synced Nov 2, 2026. Not independently verified by MCP Toplist.
Hosted endpoint declared as requiring authentication.
Connect Nullcone Threat Intelligence and confirm it works
claude mcp add --transport http nullcone https://server.smithery.ai/maco144/nullcone/mcpThis endpoint requires authentication — see the server’s docs for credentials.
[mcp_servers.nullcone]
url = "https://server.smithery.ai/maco144/nullcone/mcp"Add to ~/.codex/config.toml. This endpoint requires authentication — see the server’s docs for credentials.
https://server.smithery.ai/maco144/nullcone/mcpSettings → Connectors → “Add custom connector”, then paste this URL. This endpoint requires authentication — see the server’s docs for credentials.
{
"mcpServers": {
"nullcone": {
"url": "https://server.smithery.ai/maco144/nullcone/mcp"
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). This endpoint requires authentication — see the server’s docs for credentials.
{
"servers": {
"nullcone": {
"type": "http",
"url": "https://server.smithery.ai/maco144/nullcone/mcp"
}
}
}Save as .vscode/mcp.json in your workspace. This endpoint requires authentication — see the server’s docs for credentials.
{
"mcpServers": {
"nullcone": {
"serverUrl": "https://server.smithery.ai/maco144/nullcone/mcp"
}
}
}Add to ~/.codeium/windsurf/mcp_config.json. This endpoint requires authentication — see the server’s docs for credentials.
{
"mcpServers": {
"nullcone": {
"url": "https://server.smithery.ai/maco144/nullcone/mcp"
}
}
}This endpoint requires authentication — see the server’s docs for credentials.
After adding the config, ask your client to list this server's tools. A tool list confirms the connection; an empty list or an error means the server did not start or needs credentials.
What changed, and when this was checked
- First listed
- Jun 7, 2026
- Version history
- Unavailable — no registry exposes versions and no release tags were found
- Requirements evidence
- Declared by Smithery, last synced Nov 2, 2026. Not independently verified by MCP Toplist.
- Profile checked
- Not yet — purpose, capabilities and requirements above come from registry data only
- Ranking data as of
- Nov 2, 2026
- Smithery ↗listed since Oct 28, 2026 · still listed
Do you maintain Nullcone Threat Intelligence? to correct or enrich this profile.
Version information unavailable
The registry that lists this server does not expose version metadata, and no release tags were found on the linked repository. MCP Toplist cannot say how, or whether, this server is versioned.
Ranks ahead of 30,419 of 166,322 servers on MCP Toplist.
Show your rank
Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.
[](https://mcptoplist.com/server/smithery%2Fmaco144%2Fnullcone)<a href="https://mcptoplist.com/server/smithery%2Fmaco144%2Fnullcone"><img src="https://mcptoplist.com/badge/smithery%2Fmaco144%2Fnullcone.svg" alt="MCP Toplist: #135,903 of 166,322" /></a>Variants: append ?metric=score or ?metric=stars to the image URL.
Frequently asked questions
- Is Nullcone Threat Intelligence listed on the Official MCP Registry?
- Nullcone Threat Intelligence is not on the Official MCP Registry. It is listed on Smithery.
- How many versions does Nullcone Threat Intelligence have?
- Version information is unavailable for Nullcone Threat Intelligence: no registry that lists it exposes version metadata, and no release tags were found on its repository.
Do you run this server?
Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.