$ loading_
Investigate threat indicators via urlscan and VirusTotal with compact structured results.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "threatintel-mcp" yet — see the docs or source repo.
Investigate the domain example-login-secure.com using both urlscan and VirusTotal. Return defanged results, related IPs, scan history summaries, a reputation assessment, and recommended next investigation steps.
A structured domain intelligence report with defanged IOCs, related assets, risk signals, and action recommendations.
Investigate this SHA256: d41d8cd98f00b204e9800998ecf8427e. Summarize VirusTotal detections, malware family labels, spread clues, and related indicators for further hunting in a concise structured format.
A file hash analysis summary listing detection status, malware family clues, related IOCs, and investigation directions.
Start a threat pivot investigation from IP 185.199.110.153. Find related domains, URLs, scan records, and reputation data, then defang all results and organize them by risk level.
A risk-ranked list of related intelligence for blocking, alerting, or manual review.
Connect to VirusTotal for malware checks, URL scans, and threat intelligence.
Analyze URLs, files, IPs, and domains for faster security investigation.
Analyze URLs, files, IPs, and domains with VirusTotal security reports.
Analyze URLs, files, IPs, and domains with comprehensive VirusTotal security reports.
Query threat intelligence and trace incidents for faster security triage automation.
Query vulnerability intelligence, risk scores, and attack-surface data for security decisions.