Mcp Threatintel

Mcp Threatintel is an MCP (Model Context Protocol) server that provides unified access to multiple threat intelligence sources, allowing users to query IPs, domains, hashes, and URLs across services like AlienVault OTX, AbuseIPDB, GreyNoise, and abuse.ch projects. This tool is designed for security researchers, incident responders, and analysts who need to streamline the process of threat intelligence gathering and correlation without switching between various platforms. It supports both free and authenticated API access, enabling flexible integration in different environments.