AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
MCP verified MIT Self-run

Cybersecurity Threat Intelligence MCP

mcp-foundrynet-cyber-intel-mcp · by FoundryNet

CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.

↗ Repository
— No reviews yet
0 installs
23 views
0.0% view→install

Install

$ agentstack add mcp-foundrynet-cyber-intel-mcp

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v1.0.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v1.0.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/mcp-foundrynet-cyber-intel-mcp)

Reliability & compatibility

✓ Security review passed
0 installs to date
— no reviews yet
● 1mo ago

Declared compatibility

Claude CodeClaude DesktopCursorWindsurf

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Cybersecurity Threat Intelligence MCP? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Cybersecurity Threat Intelligence MCP

Cybersecurity threat intelligence for AI agents — CVE search enriched with EPSS exploit-likelihood + CISA known-exploited (KEV) status, plus live IP/domain reputation and a real-time threat feed.

> Part of the FoundryNet Data Network. Attest your agent's security analysis > with MINT Protocol. See also: > gov-contracts-mcp, brand-intel-mcp, patent-intel-mcp, > financial-signals-mcp, weather-intel-mcp, compliance-mcp.

Connect

  • MCP endpoint (Streamable HTTP): https://cyber-intel-mcp-production.up.railway.app/mcp
  • Registry: io.github.FoundryNet/cyber-intel-mcp
  • Agent card: https://cyber-intel-mcp-production.up.railway.app/.well-known/agent-card.json

Claude Desktop / Cursor / Claude Code

claude mcp add --transport http cyber-intel https://cyber-intel-mcp-production.up.railway.app/mcp
{ "mcpServers": { "cyber-intel": { "url": "https://cyber-intel-mcp-production.up.railway.app/mcp" } } }

Tools

| Tool | Price | What it does | |---|---|---| | search_cve | $0.01 | CVE search by severity, CVSS, EPSS, attack vector, KEV status | | cve_detail | free | Full CVE — CVSS breakdown, EPSS, KEV, CWE, affected products, refs | | check_ip | $0.01 | IP reputation (AbuseIPDB + OTX) — abuse score, threat type, pulses | | check_domain | $0.01 | Domain threat indicators (OTX) | | vulnerability_scan | $0.02 | All CVEs for a product, sorted by EPSS — "should I worry about this dependency?" | | threat_feed | $0.01 | Recent threat indicators (IPs/domains/hashes/URLs) | | mint_info | free | FoundryNet Data Network + MINT Protocol |

Free tier: 25 paid-tool queries/day per agent. Then x402: the tool returns an HTTP-402 with a Solana USDC payment memo — pay it, re-call with the same args plus payment_tx=. An Authorization: Bearer fnet_… key bypasses the paywall.

The edge: EPSS-ranked vulnerabilities

Raw CVE counts are noise. Every vulnerability here carries its EPSS score (the probability it'll be exploited) and a CISA KEV flag (whether it's actively exploited). vulnerability_scan sorts a product's CVEs by exploit likelihood — so an agent triaging a dependency sees what actually matters first.

Sources

Every 6 hours: NVD (CVEs, keyless + throttled), EPSS (exploit probability), CISA KEV (known-exploited catalog), GitHub Advisories. Live on demand: AbuseIPDB (IP reputation) + AlienVault OTX (IP/domain/pulse indicators). Stored in a standalone Supabase project.

Discovery

MCP registry: io.github.FoundryNet/cyber-intel-mcp

Built by FoundryNet · hello@foundrynet.io

Live network activity

Live feed: mint.foundrynet.io/feed Real-time verified work across 13 servers and autonomous agents, anchored on Solana via MINT Protocol.

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Write a review

Versions

  • v1.0.0 Imported from the upstream source.

More in Databases