Threatmcp

Name: Threatmcp
Author: NAXG

@NAXG

Repository

About Threatmcp

微步在线威胁分析完整API MCP服务器 - 基于MCP协议的威胁情报查询工具，支持IP分析、域名检测、文件扫描、URL分析、漏洞情报等15个完整API工具，可与Claude Desktop等AI助手无缝集成进行智能化安全分析。

Basic information

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "threatbook": {
      "command": "python",
      "args": [
        "/path/to/your/ThreatMCP/run_server.py"
      ],
      "env": {
        "THREATBOOK_API_KEY": "请替换为您的微步在线威胁分析API密钥"
      }
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Threatmcp?

Threatmcp is a Model Context Protocol (MCP) server that provides a complete interface to the Threatbook (微步在线威胁分析) threat intelligence API. It offers 15 tools covering IP reputation, domain analysis, file detection, URL scanning, vulnerability intelligence, and IOC detection, designed for security analysts and AI-powered security workflows.

How to use Threatmcp?

Install dependencies with pip install -r requirements.txt, set the THREATBOOK_API_KEY environment variable with your Threatbook API key, and run the server via run_server.py. Configuration is provided for Claude Desktop and it is compatible with any MCP client.

Key features of Threatmcp

Complete 15‑tool interface to Threatbook threat intelligence API.
IP reputation, analysis, and advanced queries.
Domain analysis, context, subdomain, and advanced queries.
File analysis, multi‑engine detection, and upload.
URL scanning, reputation reports, and vulnerability intelligence.
IOC detection for IPs and domains.

Use cases of Threatmcp

Automate threat intelligence lookups during incident response.
Enrich security alerts with IP, domain, and file reputation data.
Perform bulk analysis of URLs and files for phishing detection.
Correlate vulnerabilities with product versions using vuln_match.
Detect compromised indicators (IOCs) across networks.

FAQ from Threatmcp

What API key is needed to use Threatmcp?

You need a Threatbook (微步在线威胁分析) API key, obtained

Comments

More Other MCP servers

Reactive Resume

amruthpillai

A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!

39.5K