mcp threatintel for VS Code

io.github.aplaceforallmystuff/mcp-threatintel

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker

client:VS Code transport:stdio runtime:npm

Install mcp threatintel in VS Code

.vscode/mcp.json

{
  "inputs": [
    {
      "type": "promptString",
      "id": "otx-api-key",
      "description": "OTX_API_KEY",
      "password": true
    },
    {
      "type": "promptString",
      "id": "abuseipdb-api-key",
      "description": "ABUSEIPDB_API_KEY",
      "password": true
    },
    {
      "type": "promptString",
      "id": "greynoise-api-key",
      "description": "GREYNOISE_API_KEY",
      "password": true
    },
    {
      "type": "promptString",
      "id": "abusech-auth-key",
      "description": "ABUSECH_AUTH_KEY",
      "password": true
    }
  ],
  "servers": {
    "mcp-threatintel": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "mcp-threatintel-server"
      ],
      "env": {
        "OTX_API_KEY": "${input:otx-api-key}",
        "ABUSEIPDB_API_KEY": "${input:abuseipdb-api-key}",
        "GREYNOISE_API_KEY": "${input:greynoise-api-key}",
        "ABUSECH_AUTH_KEY": "${input:abusech-auth-key}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

mcp threatintel in other clients

mcp threatintel MCP server