io.github.CloudCorpRecords/threatkb

threatkb

Is the io.github.CloudCorpRecords/threatkb MCP server down? No. It answered initialize and tools/list in the probe of 2026-11-02.

Local MITRE ATT&CK queries: techniques, tactics, mitigations, and detections from a STIX file.

alive probed 2026-11-14 · unchanged since 2026-11-02

6tools

675tokens in Claude Opus 5.5

0.3 %of Claude's 200k window

0.3×the median server

252 msto initialize

6 msto list tools

Run it: npx -y @reneturcios/threatkb@0.1.0 (stdio, probed in a container with the network off)
Host: npmjs.com
Reports itself as: threatkb 0.1.0
Capabilities: tools
Instructions: none
Of a 1M window: <0.1 % of a 1M context window
Count: 675 tokens in Claude Opus 5.5, exact, measured 2026-11-02. With the Claude Code prefix mcp__…__ on each tool name: 729. The o200k_base estimate is 370. Counted again when the tool definitions change. Method.
Repository: https://github.com/CloudCorpRecords/threatkb
Registry: active, updated 2026-11-02 · registry entry

Most expensive tools

The Claude column scales the o200k estimate of each tool by this server's ratio of exact to estimate, 1.82×.

Tool	≈ Claude tokens	o200k estimate	Share of this server
search_technique_full	159	87	24 %
query_technique	150	82	22 %
query_mitigations	126	69	19 %
query_detections	126	69	19 %
list_tactics	60	33	9 %

Other registry entries on npmjs.com, the ones next to this name; all of them.

Servers that mention mitigations or detections.

The result of the latest probe, the tool count and the token cost. The feed has an entry for every probe that changed them.

Stops answering, comes back, tool set or cost changes. One confirmation mail first, a stop link in every mail.