本文へスキップ
MCP ThesaurusMCP Thesaurus

Cybersecurity Threat Intelligence MCP

アーカイブ済みGood67/100申請する

streamable-httpMITupdated 29d ago

Cybersecurity threat intelligence for AI agents — CVE search enriched with EPSS exploit-likelihood + CISA known-exploited (KEV) status, plus live IP/domain reputation and a real-time threat feed.

このリポジトリは所有者によってアーカイブされました。動作はしますが、更新はされません。

ソースウェブサイト

Cybersecurity Threat Intelligence MCP で何ができる？

Cybersecurity Threat Intelligence MCP

Cybersecurity threat intelligence for AI agents — CVE search enriched with EPSS exploit-likelihood + CISA known-exploited (KEV) status, plus live IP/domain reputation and a real-time threat feed.

Part of the FoundryNet Data Network. Every result carries verifiable provenance so a buyer can confirm it was produced by this server, unaltered. See also: gov-contracts-mcp, brand-intel-mcp, patent-intel-mcp, financial-signals-mcp, weather-intel-mcp, compliance-mcp.

Connect

  • MCP endpoint (Streamable HTTP): https://cyber-intel-mcp-production.up.railway.app/mcp
  • Registry: io.github.FoundryNet/cyber-intel-mcp
  • Agent card: https://cyber-intel-mcp-production.up.railway.app/.well-known/agent-card.json

Claude Desktop / Cursor / Claude Code

claude mcp add --transport http cyber-intel https://cyber-intel-mcp-production.up.railway.app/mcp

{ "mcpServers": { "cyber-intel": { "url": "https://cyber-intel-mcp-production.up.railway.app/mcp" } } }

Tools

Tool Price What it does
search_cve $0.01 CVE search by severity, CVSS, EPSS, attack vector, KEV status
cve_detail free Full CVE — CVSS breakdown, EPSS, KEV, CWE, affected products, refs
check_ip $0.01 IP reputation (AbuseIPDB + OTX) — abuse score, threat type, pulses
check_domain $0.01 Domain threat indicators (OTX)
vulnerability_scan $0.05 All CVEs for a product, sorted by EPSS — "should I worry about this dependency?"
threat_feed $0.01 Recent threat indicators (IPs/domains/hashes/URLs)
brief_summary $0.50 Sample of the day's curated threat brief (headline findings)
daily_brief $15 Full curated daily threat brief — top exploited CVEs, KEV adds, active indicators
mint_info free FoundryNet Data Network + provenance/attestation info

Free tier: 25 paid-tool queries/day per agent. Then metered: the tool returns an HTTP-402 with a payment request — settle it, re-call with the same args plus payment_tx=<reference>. An Authorization: Bearer fnet_… key bypasses the paywall.

The edge: EPSS-ranked vulnerabilities

Raw CVE counts are noise. Every vulnerability here carries its EPSS score (the probability it'll be exploited) and a CISA KEV flag (whether it's actively exploited). vulnerability_scan sorts a product's CVEs by exploit likelihood — so an agent triaging a dependency sees what actually matters first.

Sources

Every 6 hours: NVD (CVEs, keyless + throttled), EPSS (exploit probability), CISA KEV (known-exploited catalog), GitHub Advisories. Live on demand: AbuseIPDB (IP reputation) + AlienVault OTX (IP/domain/pulse indicators). Stored in a standalone Supabase project.

Discovery

MCP registry: io.github.FoundryNet/cyber-intel-mcp

Built by FoundryNet · forge@foundrynet.io

Live network activity

Live feed: mint.foundrynet.io/feed
Real-time verified work across 17 servers and autonomous agents, with verifiable provenance on every result.