What is the ORKL Threat Intelligence Library?
ORKL is a threat intelligence library that provides structured data on malware, threat actors, and sources. The ORKL MCP Server accesses this data through the public ORKL API.
ORKL MCP Server
@heiths
Basic information
About ORKL MCP Server
MCP server for ORKL Threat Intelligence Library
ORKL MCP Server config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"orkl_mcp_server": {
"command": "uv",
"args": [
"venv"
]
}
}
}ORKL MCP Server tools
Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is ORKL MCP Server?
The ORKL MCP Server is an MCP (Model Control Protocol) server that provides access to the ORKL Threat Intelligence Library via the ORKL API. It is designed for developers and security analysts who want to query threat intelligence data from within LLM applications like Claude Desktop.
How to use ORKL MCP Server?
Install prerequisites (Python 3.10+ and the uv package manager), clone the repository, install dependencies with uv, and configure via environment variables (e.g., ORKL_API_BASE_URL) or a config.json file. Then register the server with Claude Desktop by adding a configuration entry to claude_desktop_config.json that points to the cloned directory and runs run_server.py using uv.
Key features of ORKL MCP Server
- Access to ORKL Threat Intelligence Library via the official API
- Efficient caching to minimize API calls
- Rate limiting to respect ORKL API restrictions
- Standardized MCP Tools and Resources for LLM interaction
- Built-in support for Claude Desktop integration
Use cases of ORKL MCP Server
- Malware investigation: Check a file’s SHA1 hash against known threats in the ORKL database
- Threat landscape overview: Search for recent reports relevant to a specific sector (e.g., financial institutions) and identify emerging trends
- Fetch and explore recent threat reports, threat actors, or sources
- Retrieve detailed information about a specific report, actor, or source via direct resource URIs
- Clear local cache to ensure fresh data on subsequent queries
Frequently asked questions
What are the prerequisites to run ORKL MCP Server?
You need Python 3.10 or later and the `uv` package manager (recommended). The server also requires a working internet connection to reach the ORKL API.
How do I configure the base URL or other settings?
Configuration can be provided via environment variables (e.g., `ORKL_API_BASE_URL`, `ORKL_CACHE_TTL`, `ORKL_RATE_LIMIT_REQUESTS`) or a JSON configuration file (`config.json` in the current directory). Default values are documented in the README.
Is caching enabled by default?
Yes, caching is enabled by default (`ORKL_USE_CACHE` is set to `1`). The cache time-to-live is 300 seconds by default, but can be adjusted via the `ORKL_CACHE_TTL` environment variable.
How can I clear the cache?
The server provides an MCP tool `clear_cache` that can be invoked to clear the local cache and force fresh data on subsequent API requests.
More Other MCP servers
EverArt
modelcontextprotocolModel Context Protocol Servers
88.1K
MaxKB
1Panel-dev🔥 MaxKB is an open-source platform for building enterprise-grade agents. 强大易用的开源企业级智能体平台。
22.0K
Activepieces
activepiecesAI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents
23.2K
Lemon.io
lemon-ioRequest dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3
Figs, Relationship Expert
Figs O'Sullivan, LMFTCouples therapist Figs O'Sullivan (LMFT, 17 years, endorsed by Sue Johnson, creator of EFT) inside your AI. Ask relationship questions answered from his clinical writing, name the pattern in a fight, get a three-step rep
Comments