Threatfox for Grok
io.github.pipeworx-io/threatfox
ThreatFox MCP — abuse.ch indicator-of-compromise feed (free, key required)
client:Grok
transport:streamable-http
runtime:npm
tools:48
Install Threatfox in Grok
.mcp.json (in your project root)
{
"mcpServers": {
"threatfox": {
"type": "http",
"url": "https://gateway.pipeworx.io/threatfox/mcp"
}
}
}Grok Build reads Claude Code's .mcp.json and Claude Desktop's config unchanged, so a server you have already set up there needs nothing new. The Grok web app and X integration do not take custom servers. Grok docs
What Grok can do once it is connected
- ask_pipeworx
- ask_pipeworx_beta
- ask_pipeworx_grounded
- search_within
- deep_research
- discover_tools
- resolve_entity
- compare_entities
- subscribe
- unsubscribe
- list_subscriptions
- recent_alerts
- entity_profile
- recent_changes
- validate_claim
- company_facts
- company_register_search
- scan_dependency
- bet_research
- polymarket_arbitrage
- polymarket_edges
- polymarket_kalshi_spread
- polymarket_fill_risk
- polymarket_edge_tracker