MCP Threat Intel ORKL

@fr0gger

リポジトリ

基本情報

カテゴリ

開発者ツール

トランスポート

stdio

作者

fr0gger

投稿者

Thomas Roccia

MCP Threat Intel ORKL について

This is a threat intel MCP server connected to the ORKL API to retrieve threat report and ask for IOCs, Threat Actors and breaches.

#threat-intelligence #mcp-server#orkl-api

MCP Threat Intel ORKL の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "orkl": {
      "command": "uv",
      "args": [
        "--directory",
        "/MyMCP/mcptest/orkl",
        "run",
        "orkl"
      ]
    }
  }
}

MCP Threat Intel ORKL のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is MCP Threat Intel ORKL?

MCP Threat Intel ORKL is a Model Context Protocol (MCP) server for querying the ORKL API. It provides tools for fetching and analyzing threat reports, threat actors, and sources, and integrates smoothly with MCP-compatible applications.

How to use MCP Threat Intel ORKL?

Edit or create the Claude desktop config file (claude_desktop_config.json) to add the server configuration with the command uv and the arguments --directory /path/to/orkl run orkl. The server is then available in MCP-compatible clients.

Key features of MCP Threat Intel ORKL

Fetch latest threat reports with titles and IDs
Retrieve detailed information for a specific threat report
Fetch a list of known threat actors
Get detailed information for a specific threat actor
Fetch a list of sources used in threat intelligence
Retrieve detailed metadata for a specific source

Use cases of MCP Threat Intel ORKL

Automate retrieval of recent threat intelligence reports for analysis
Quickly look up details on a specific threat actor during an investigation
Enumerate known sources of threat intelligence for research
Integrate ORKL data into a GenAI assistant for security reporting

よくある質問

What does MCP Threat Intel ORKL do?

It provides MCP tools to query the ORKL API for threat reports, threat actors, and sources, enabling integration with MCP-compatible applications like Claude.

How do I install MCP Threat Intel ORKL?

Add the provided JSON configuration to your Claude desktop config file, specifying the path to the server directory and using `uv` to run the `orkl` command.

What runtime dependencies does MCP Threat Intel ORKL require?

The server is run via `uv`, which implies Python and the `uv` package manager are required. The exact Python version is not specified in the README.

Where does the threat intelligence data come from?

All data is fetched from the ORKL API. No local data storage is mentioned.

Does MCP Threat Intel ORKL require authentication?

The README does not mention any authentication requirements for the ORKL API or the MCP server itself.

「開発者ツール」の他のコンテンツ

LocalCan

Gives AI agents public URLs (tunnels) for localhost, live HTTP traffic inspection, snapshot publishing, and access control. Part of LocalCan, the ngrok alternative for Mac, Windows and Linux. Free plan.

GripForge

gripforgeai

The tools your AI needs to make your games. Turn prompts into production-ready game assets — animated characters with their weapons attached, seamless textures, terrain, VFX, HUDs — and playable game kits Unity, Godot, U

Testiny MCP server

Mategra GmbH

Testiny is a test case management platform. Its remote MCP server lets AI assistants such as Claude, ChatGPT, GitHub Copilot, Cursor and other MCP clients work directly with your Testiny data. Browse and search projects,

DrUrls

DrUrls audits websites for SEO, and its MCP server lets Claude, ChatGPT, Claude Code, Cursor or VS Code work with those audits directly: list your sites with their latest score and grade, read each issue across SEO, perf

Modelglass

Modelglass turns "which model should I use?" into a lookup instead of a guess. Seven tools give your agent live pricing across image, language, video, and audio models. Sourced and versioned, not scraped once and forgott