io.github.aplaceforallmystuff/mcp-threatintel
mcp-threatintel
Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker
alive probed 2026-10-15
17tools
2.0ktokens in Claude Opus 5.5
2.2ktokens in Claude Code
1.0 %of a 200k context window
1.1ko200k_base estimate
372 msto initialize
6 msto list tools
- Run it
- npx -y mcp-threatintel-server@1.0.1 (stdio, probed in a container with the network off)
- Host
- npmjs.com
- Reports itself as
- mcp-threatintel 1.0.0
- Capabilities
- tools
- Instructions
- none
- Claude count
- Claude Opus 5.5, measured 2026-10-15. Counted again when the tool definitions change. Method.
- Repository
- https://github.com/aplaceforallmystuff/mcp-threatintel
- Registry
- active, updated 2025-11-28 · registry entry
- Reachable
- 1 of the last 1 probe
Most expensive tools
| Tool | Tokens (o200k) | Share of this server |
|---|---|---|
| malwarebazaar_tag | 86 | 8 % |
| abuseipdb_check | 84 | 8 % |
| threatintel_lookup_hash | 76 | 7 % |
| otx_search_pulses | 73 | 7 % |
| threatintel_lookup_ip | 67 | 6 % |
Badge and feed
[](https://mcpcost.ulehla.dev/s/io.github.aplaceforallmystuff/mcp-threatintel)
An entry for every probe that changed the result, the tool count or the token cost: Atom feed. Add it to a feed reader or a Slack RSS app to hear when the server stops answering or its tool set grows.