Atlas / MCP servers / 4r9un / Fast ThreatIntel

Fast ThreatIntelCAUTION

Name: Fast ThreatIntel
Author: 4r9un

mcp/4r9un/fast-threatintel

MCP server by 4r9un · mcp · mcp server · mcp tools · Audited 2026-10-08

⚑ Report / re-scan Source ↗

AI-Powered Threat Intelligence MCP tool

Verdict

CAUTION

Grade

Trust score

82 /100

Exposed tools

1 1r · 0w · 0d

Transport

—

License

—

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://mseep.ai/app/4r9un-fastmcp-threatintel)

[](https://github.com/4R9UN/fastmcp-threatintel/actions/workflows/ci.yml) [](https://codecov.io/gh/4R9UN/fastmcp-threatintel) [](https://badge.fury.io/py/fastmcp-threatintel) [](https://www.python.org/downloads/) [](https://opensource.org/licenses/Apache-2.0) [](https://hub.docker.com/r/arjuntrivedi/fastmcp-threatintel) [](https://mseep.ai/app/09be09c3-bda9-4cb9-82d3-329459fecbc7)

🚀 MCP AI Powered Threat Intelligence - Revolutionizing Cybersecurity Built by Arjun Trivedi (4R9UN) - Enterprise-Grade Threat Intelligence Platform

A comprehensive Model Context Protocol (MCP) server that provides enterprise-grade threat intelligence capabilities through natural language AI prompts. Analyze IPs, domains, URLs, and file hashes across multiple threat intelligence platforms with advanced APT attribution and interactive reporting.

✨ Why FastMCP ThreatIntel?

🎯 Purpose-Built for Modern Security Teams

🤖 AI-First Design: Natural language queries with intelligent IOC detection
🔗 MCP Integration: Seamless integration with Claude Desktop, VSCode (Roo-Cline), and other AI assistants
⚡ Lightning Fast: UV-powered development with optimized async proces

Read from source at commit 2e602bd24499OBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add fastmcp-threatintel --env ABUSEIPDB_API_KEY=${ABUSEIPDB_API_KEY} --env IPINFO_API_KEY=${IPINFO_API_KEY} --env OTX_API_KEY=${OTX_API_KEY} --env VIRUSTOTAL_API_KEY=${VIRUSTOTAL_API_KEY} -- uvx fastmcp-threatintel

claude-desktop

{
  "mcpServers": {
    "fastmcp-threatintel": {
      "command": "uvx",
      "args": [
        "fastmcp-threatintel"
      ],
      "env": {
        "ABUSEIPDB_API_KEY": "${ABUSEIPDB_API_KEY}",
        "IPINFO_API_KEY": "${IPINFO_API_KEY}",
        "OTX_API_KEY": "${OTX_API_KEY}",
        "VIRUSTOTAL_API_KEY": "${VIRUSTOTAL_API_KEY}"
      }
    }
  }
}

Exposed tools (1)

1 read · 0 write · 0 destructive.

Tool	Risk	Description
`analyze_iocs`	read

Trust audit

CAUTIONgrade B · trust 82/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (2 observation(s))
Network: declared (8 observation(s))
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (10)

MEDIUMInventory / provenance · inv.binary · CWE-1104

.git_disabled/index

index

Why it matters. a compiled or binary member cannot be reviewed from source