isMalicious threat intelligence for AI agents

MCP server · by ismalicious

Communication npmStreamable HTTP v0.8.0

Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans

View source ↗ Website ↗ Generate config for multiple servers More servers

Install

Pin version registry version 0.8.0

npm
npx -y @ismalicious/mcp-server

npm
npx -y @ismalicious/mcp-server@0.8.0

Streamable HTTP
https://api.ismalicious.com/mcp

Setup by client

Pick your client — the config below is generated for this server (both local and hosted-endpoint forms). Copy respects the “Pin version” switch above.

claude_desktop_config.json

{
  "mcpServers": {
    "mcp-server-92": {
      "command": "npx",
      "args": [
        "-y",
        "@ismalicious/mcp-server"
      ],
      "env": {
        "ISMALICIOUS_API_KEY": "<YOUR_ISMALICIOUS_API_KEY>",
        "ISMALICIOUS_API_SECRET": "<YOUR_ISMALICIOUS_API_SECRET>"
      }
    }
  }
}

{
  "mcpServers": {
    "mcp-server-92": {
      "command": "npx",
      "args": [
        "-y",
        "@ismalicious/mcp-server@0.8.0"
      ],
      "env": {
        "ISMALICIOUS_API_KEY": "<YOUR_ISMALICIOUS_API_KEY>",
        "ISMALICIOUS_API_SECRET": "<YOUR_ISMALICIOUS_API_SECRET>"
      }
    }
  }
}

Remote (hosted) endpoint

https://api.ismalicious.com/mcp

Claude Desktop: Settings → Connectors → Add custom connector, paste this URL, and provide: Authorization.

Format verified against the official Claude Desktop docs ↗.

terminal

claude mcp add --env ISMALICIOUS_API_KEY=<YOUR_ISMALICIOUS_API_KEY> --env ISMALICIOUS_API_SECRET=<YOUR_ISMALICIOUS_API_SECRET> mcp-server-92 -- npx -y @ismalicious/mcp-server

claude mcp add --env ISMALICIOUS_API_KEY=<YOUR_ISMALICIOUS_API_KEY> --env ISMALICIOUS_API_SECRET=<YOUR_ISMALICIOUS_API_SECRET> mcp-server-92 -- npx -y @ismalicious/mcp-server@0.8.0

terminal

claude mcp add --transport http mcp-server-92 https://api.ismalicious.com/mcp --header "Authorization: Bearer <YOUR_AUTHORIZATION>"

Format verified against the official Claude Code docs ↗.

.cursor/mcp.json

{
  "mcpServers": {
    "mcp-server-92": {
      "command": "npx",
      "args": [
        "-y",
        "@ismalicious/mcp-server"
      ],
      "env": {
        "ISMALICIOUS_API_KEY": "<YOUR_ISMALICIOUS_API_KEY>",
        "ISMALICIOUS_API_SECRET": "<YOUR_ISMALICIOUS_API_SECRET>"
      }
    }
  }
}

{
  "mcpServers": {
    "mcp-server-92": {
      "command": "npx",
      "args": [
        "-y",
        "@ismalicious/mcp-server@0.8.0"
      ],
      "env": {
        "ISMALICIOUS_API_KEY": "<YOUR_ISMALICIOUS_API_KEY>",
        "ISMALICIOUS_API_SECRET": "<YOUR_ISMALICIOUS_API_SECRET>"
      }
    }
  }
}

.cursor/mcp.json (hosted endpoint)

{
  "mcpServers": {
    "mcp-server-92": {
      "url": "https://api.ismalicious.com/mcp",
      "headers": {
        "Authorization": "<YOUR_AUTHORIZATION>"
      }
    }
  }
}

Format verified against the official Cursor docs ↗.

.vscode/mcp.json

{
  "servers": {
    "mcp-server-92": {
      "command": "npx",
      "args": [
        "-y",
        "@ismalicious/mcp-server"
      ],
      "env": {
        "ISMALICIOUS_API_KEY": "<YOUR_ISMALICIOUS_API_KEY>",
        "ISMALICIOUS_API_SECRET": "<YOUR_ISMALICIOUS_API_SECRET>"
      }
    }
  }
}

{
  "servers": {
    "mcp-server-92": {
      "command": "npx",
      "args": [
        "-y",
        "@ismalicious/mcp-server@0.8.0"
      ],
      "env": {
        "ISMALICIOUS_API_KEY": "<YOUR_ISMALICIOUS_API_KEY>",
        "ISMALICIOUS_API_SECRET": "<YOUR_ISMALICIOUS_API_SECRET>"
      }
    }
  }
}

.vscode/mcp.json (hosted endpoint)

{
  "servers": {
    "mcp-server-92": {
      "type": "http",
      "url": "https://api.ismalicious.com/mcp",
      "headers": {
        "Authorization": "<YOUR_AUTHORIZATION>"
      }
    }
  }
}

Format verified against the official VS Code docs ↗.

mcp_config.json

{
  "mcpServers": {
    "mcp-server-92": {
      "command": "npx",
      "args": [
        "-y",
        "@ismalicious/mcp-server"
      ],
      "env": {
        "ISMALICIOUS_API_KEY": "<YOUR_ISMALICIOUS_API_KEY>",
        "ISMALICIOUS_API_SECRET": "<YOUR_ISMALICIOUS_API_SECRET>"
      }
    }
  }
}

{
  "mcpServers": {
    "mcp-server-92": {
      "command": "npx",
      "args": [
        "-y",
        "@ismalicious/mcp-server@0.8.0"
      ],
      "env": {
        "ISMALICIOUS_API_KEY": "<YOUR_ISMALICIOUS_API_KEY>",
        "ISMALICIOUS_API_SECRET": "<YOUR_ISMALICIOUS_API_SECRET>"
      }
    }
  }
}

mcp_config.json (hosted endpoint)

{
  "mcpServers": {
    "mcp-server-92": {
      "serverUrl": "https://api.ismalicious.com/mcp",
      "headers": {
        "Authorization": "<YOUR_AUTHORIZATION>"
      }
    }
  }
}

Format verified against the official Windsurf docs ↗.

Environment variables

Defined in the server's official registry manifest. Required secrets are shown as <YOUR_…> placeholders in the configs above.

ISMALICIOUS_API_KEY secret — API key from https://ismalicious.com/app/account. Optional: without it the server starts in bootstrap mode and offers bootstrap_key.
ISMALICIOUS_API_SECRET secret — API secret paired with the key
ISMALICIOUS_API_BASE — API base URL (defaults to https://ismalicious.com/api; https://api.ismalicious.com reaches the API host directly)
ISMALICIOUS_TIMEOUT_MS — Replaces every tool's timeout, in milliseconds (defaults: gate 15000, check_indicator 25000, CVE and exploited_cves 10000, search_indicators 20000, check_indicators 60000, check_password_exposure 10000, scan_email 20000,
ISMALICIOUS_WEB_BASE — Base URL for bootstrap_key, a route only https://ismalicious.com/api serves (defaults to ISMALICIOUS_API_BASE, or https://ismalicious.com/api when that is api.ismalicious.com)
ISMALICIOUS_CACHE_TTL_S — Result cache: 0 turns it off; N caps every tool's cache lifetime at N seconds (never raises one)
ISMALICIOUS_PREWARM — 0 (or false, off, no) skips the one unauthenticated GET /health sent after initialize to open the connection
Authorization required secret header — Bearer <apiKey>:<apiSecret>, the key pair from https://ismalicious.com/app/account. Every tool but check_password_exposure (local only) and bootstrap_key.

GitHub

最近更新于 24 天前 · MIT license

About this server

@ismalicious/mcp server A zero dependency Model Context Protocol server that gives an AI agent isMalicious threat intelligence: reputation verdicts for IP addresses, domains, URLs, file hashes, email addresses and phone numbers, the CVE catalog, and the isinjected gate that scans untrusted content f…

Summary from the project README — github.com/hexablob/ismalicious-mcp-server

Distributed as npm, Streamable HTTP, listed under Communication. Review our MCP security guide before granting access to real data.

Frequently asked questions

What does the isMalicious threat intelligence for AI agents MCP server do?

How do I install isMalicious threat intelligence for AI agents?

Run the install command shown above, then paste the config for your client (Claude Desktop, Claude Code, Cursor, VS Code or Windsurf) into its MCP settings and restart the client.

Is isMalicious threat intelligence for AI agents free to use?

The MCP server itself is free to install. The source is public on https://github.com/hexablob/ismalicious-mcp-server. Any third-party service it calls may require its own API key and account.

Which clients support isMalicious threat intelligence for AI agents?

Any MCP-compatible client can use it, including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and custom agents.

Add this badge

Publish this server? Link back with a badge on your README or site — copy either snippet.

Markdown

[![Listed on MCPNav](https://mcpnav.net/badge/mcp-server-92.svg)](https://mcpnav.net/server/mcp-server-92/)

HTML

<a href="https://mcpnav.net/server/mcp-server-92/"><img src="https://mcpnav.net/badge/mcp-server-92.svg" alt="Listed on MCPNav" height="20"></a>