Threat Intelligence MCP Server

113 tools. 3 can modify or destroy data without limits.

3 write tools that can modify data. Rate limits recommended.

Last updated:

3 can modify or destroy data
110 read-only
113 tools total

Community server · catalogue entry verified 11/06/2026

How to control Threat Intelligence MCP Server ↓

What Threat Intelligence MCP Server exposes to your agents

Read (110) Write / Execute (3) Destructive / Financial (0)
High Risk

The most dangerous Threat Intelligence MCP Server tools

3 of Threat Intelligence MCP Server's 113 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

How to control Threat Intelligence MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Threat Intelligence MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations
{
  "intel_generate_report": {
    "limits": [
      {
        "counter": "intel_generate_report_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "intel_trend_detection": {
    "limits": [
      {
        "counter": "intel_trend_detection_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Threat Intelligence MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON THREAT INTELLIGENCE →

Free to start. No card required.

All 113 Threat Intelligence MCP Server tools

READ 110 tools
Read intel_trend_detection Detect activity trends by comparing recent intelligence activity against a baseline. Identifies SURGE (>50% in Read intel_acled_events Get armed conflict events from ACLED. Optional: country (name), days (default 7), limit (default 100). Require Read intel_ai_datacenters Query 48+ AI datacenter clusters worldwide with power capacity (MW), operators, and locations. Covers hypersca Read intel_ai_releases Track AI/AGI developments from arXiv, HuggingFace, and AI news feeds. Lab mention trending. Read intel_aircraft_batch Batch lookup of aircraft details by ICAO24 hex codes (max 20). Returns registration, type, operator from hexdb Read intel_aircraft_details Get aircraft details from hexdb.io by ICAO24 hex code (free, no API key). Read intel_airport_delays Get current US airport delays from FAA (20 major airports). No API key needed. Read intel_alert_digest Cross-domain alert aggregation from 7 intelligence sources: space weather, instability, military surge, cable Read intel_arxiv_papers Search recent arXiv papers in AI/ML (cs.AI, cs.LG, cs.CL). Optional custom query. Returns title, authors, abst Read intel_aviation_domestic Global air traffic snapshot from OpenSky Network: total airborne aircraft, regional breakdown, busiest origin Read intel_bond_indices Get major bond ETF prices and performance: AGG (total bond), TLT (20Y+ Treasury), HYG (high yield), LQD (inves Read intel_btc_technicals Bitcoin technical indicators: SMA-50, SMA-200, Mayer Multiple, golden/death cross, distance from ATH, 7d/30d c Read intel_cable_health Assess undersea cable corridor health from NGA navigational warnings. 6 corridors scored 0-3. Read intel_classify_event Classify text into threat categories (military, terrorism, cyber, political, economic, health, climate, nuclea Read intel_climate_anomalies Detect temperature and precipitation anomalies across 15 global climate zones (vs. prior year baseline). Read intel_cloud_regions 28 major cloud provider regions (AWS, Azure, GCP) with coordinates, zone counts, and launch dates. Optional: p Read intel_commodity_quotes Get commodity futures quotes: gold, silver, crude oil (WTI & Brent), natural gas, corn, wheat, soybeans from Y Read intel_company_filings Get recent SEC filings for a company by ticker symbol (10-K, 10-Q, 8-K). Resolves ticker to CIK automatically. Read intel_company_profile Get comprehensive company profile: stock quote, financials, sector/industry, recent news, SEC filings, and Git Read intel_country_brief Generate a country intelligence brief using Ollama LLM + World Bank + ACLED data. Falls back to data-only if L Read intel_country_dossier Comprehensive country intelligence dossier: economy (GDP/inflation), stock market, elections, sanctions, news Read intel_country_stocks Get real-time stock index quote for any country by ISO-3 code. Maps country to its primary exchange index tick Read intel_critical_minerals Query 28+ critical mineral deposits worldwide: lithium, cobalt, rare earths, nickel, copper, graphite, mangane Read intel_cross_correlate Cross-domain intelligence correlation. Given a topic, finds related signals across ALL intelligence domains (m Read intel_crypto_quotes Get top cryptocurrency prices, market caps, and 7-day sparklines from CoinGecko. Optional: limit (int, default Read intel_cyber_threats Get aggregated cyber threat intelligence from 4 feeds (Feodo, CISA KEV, SANS, URLhaus). No API key needed. Read intel_disaster_alerts Global disaster alerts from GDACS (UN): earthquakes, floods, cyclones, droughts, wildfires. Severity levels (g Read intel_disease_outbreaks Aggregate disease outbreak alerts from WHO DON, ProMED, and CIDRAP. Flags high-concern pathogens (Ebola, H5N1, Read intel_displacement_summary Get UNHCR refugee/displacement statistics by country of origin. No API key needed. Read intel_domain_summary Summary of all intelligence data stored in the vector database. Shows per-category data point counts, unique s Read intel_earnings_calendar Get upcoming earnings announcements for top 20 mega-cap stocks (AAPL, MSFT, GOOGL, etc.) with EPS estimates an Read intel_earnings_surprise Get recent earnings surprises for a specific stock — past quarter actual vs estimate, surprise %, and forward Read intel_earthquakes Get recent earthquakes from USGS. No API key needed. Read intel_election_calendar Get upcoming global election calendar with proximity-based instability risk scoring. Covers 2025-2029. Read intel_electricity_rates Get US electricity retail rates (cents/kWh) by sector (residential, commercial, industrial). Optionally filter Read intel_energy_prices Get crude oil (Brent, WTI) and natural gas futures prices from EIA. Requires EIA_API_KEY. Read intel_environmental_events Natural events from NASA EONET: wildfires, severe storms, volcanoes, floods, icebergs, drought. Includes geolo Read intel_etf_flows Get Bitcoin spot ETF prices and volumes (IBIT, FBTC, GBTC, ARKB, BITB). Read intel_extract_entities Extract named entities (countries, leaders, organizations, companies, CVEs, APT groups) from text or recent ne Read intel_financial_centers GFCI top 20 global financial centers with rankings, ratings, specializations, and exchange info. Optional: cou Read intel_fleet_report Naval fleet activity report aggregating theater posture (5 theaters), vessel snapshot (9 waterways), military Read intel_focal_points Detect focal points where multiple intelligence signals converge on the same entity (country, organization, le Read intel_forex_rates Get latest foreign exchange rates from ECB via Frankfurter API. Optional: base currency (default USD), target Read intel_forex_timeseries Get historical FX rate timeseries with trend analysis. Optional: base, symbol, days. Read intel_fred_series Get Federal Reserve economic data series (GDP, UNRATE, CPIAUCSL, DFF, T10YIE, etc.). Requires FRED_API_KEY. Read intel_gas_prices Get today Read intel_gdelt_search Search GDELT 2.0 for global news articles or volume timelines. No API key needed. Read intel_hacker_news Get top stories from Hacker News (Firebase API). Returns title, score, URL, author, comment count. Optional: l Read intel_hotspot_escalation Dynamic escalation scores for 22 intel hotspots combining news, military, conflict, and convergence signals. E Read intel_humanitarian_summary Get humanitarian crisis datasets from HDX. No API key needed. Optional: country code. Read intel_instability_index Compute Country Instability Index v2 (0-100) from 4 weighted domains: unrest, conflict, security, information. Read intel_internet_outages Get internet outages from Cloudflare Radar (last 7 days). Optional: CLOUDFLARE_API_TOKEN for higher limits. Read intel_keyword_spikes Detect trending keyword spikes against historical baselines using Welford Read intel_macro_composite Get weighted macro market composite score (0-100) synthesizing Fear & Greed, VIX, sector breadth, DXY, BTC tec Read intel_macro_signals Get 7 key macro signals: Fear & Greed, mempool fees, DXY, VIX, gold, 10Y Treasury, BTC dominance. Read intel_major_crosses Get all 8 major FX currency pairs (EUR/USD, USD/JPY, GBP/USD, etc.) with cross rates and DXY proxy. Read intel_market_quotes Get real-time stock market index quotes (S&P 500, Dow, Nasdaq, FTSE, Nikkei, etc.). Optional: symbols (list of Read intel_military_bases Query 120+ military bases worldwide from 9 operators (USA, Russia, China, UK, France, NATO, India, Turkey, Isr Read intel_military_flights Track military aircraft via OpenSky Network (ICAO hex + callsign filtering). Optional: bbox (lamin,lomin,lamax Read intel_military_surge Detect military surge anomalies — foreign aircraft concentration above baselines in 8 sensitive regions (Persi Read intel_nav_warnings Get active navigational warnings from NGA Maritime Safety. Optional: navarea (I-XVI). Read intel_news_clusters Cluster recent news articles by topic similarity using Jaccard coefficient. Groups related stories and extract Read intel_news_feed Get aggregated intelligence news from 119 RSS feeds across 24 categories. Covers geopolitics, security, tech, Read intel_nuclear_facilities Query 25+ nuclear power plants, enrichment sites, research reactors, and reprocessing facilities worldwide. In Read intel_nuclear_monitor Monitor seismic activity near 5 known nuclear test sites (Punggye-ri, Lop Nur, Novaya Zemlya, Nevada NTS, Semi Read intel_pipelines Query 25+ strategic oil, gas, and hydrogen pipelines with routes, capacity, and status. Includes Nord Stream, Read intel_population_exposure Estimate population at risk near active events (earthquakes, wildfires, conflict). Finds major cities within r Read intel_prediction_markets Get active prediction markets from Polymarket (questions, YES probabilities, volumes, sentiment). Read intel_recent_8k Get most recent 8-K filings (material corporate events: M&A, executive changes, earnings releases) across all Read intel_residential_natgas Get US residential natural gas prices ($/thousand cubic feet) — monthly average. Requires EIA_API_KEY. Read intel_risk_scores Get country risk scores computed from ACLED conflict data vs historical baselines. Requires ACLED_ACCESS_TOKEN Read intel_sanctions_search Search the US Treasury OFAC Specially Designated Nationals (SDN) sanctions list. Substring match on name, coun Read intel_sec_filings Search SEC EDGAR filings via full-text search. Filter by form type (10-K, 10-Q, 8-K) and date range. Read intel_sector_heatmap Get US equity sector performance heatmap (11 SPDR sector ETFs). Read intel_semantic_search Semantic search across all stored intelligence data using natural language. Searches historical data accumulat Read intel_service_status Monitor cloud service provider status (AWS, Azure, GCP, Cloudflare, GitHub). Shows active incidents and recent Read intel_shipping_index Compute shipping stress index from dry bulk ETFs (BDRY, SBLK, EGLE, ZIM). Stress score 0-100. Read intel_signal_convergence Detect geographic convergence of multi-domain signals (earthquakes, conflict, military) in hotspot regions. Read intel_signal_summary Aggregate all intelligence signals by country with convergence scoring. Combines conflict, displacement, earth Read intel_similar_events Find historically similar intelligence events or data. Given a text description, finds the most similar stored Read intel_social_signals Monitor geopolitical discussion velocity on Reddit (r/worldnews, r/geopolitics). Engagement metrics and trendi Read intel_space_weather Get solar activity: Kp geomagnetic index, X-ray flare class, solar wind, and SWPC alerts from NOAA. Read intel_spaceports Query 27+ launch facilities and spaceports worldwide. Filterable by country, status, type (orbital/suborbital) Read intel_stablecoin_status Check stablecoin peg health (USDT, USDC, DAI, FDUSD). Flags depegs >0.5%. Read intel_status Get data source health, circuit breaker status, cache freshness, vector store stats, and system statistics. Read intel_stock_exchanges Query 80+ stock exchanges across 4 tiers (mega >$3T, major, emerging, frontier) with market cap, index tickers Read intel_strategic_ports Query 40+ strategic ports worldwide: container mega-ports, oil/LNG terminals, naval bases, bulk ports. Filtera Read intel_strategic_posture Composite global risk assessment from 9 intelligence domains: military, political, conflict, infrastructure, e Read intel_temporal_anomalies Detect temporal anomalies — activity levels that deviate from historical baselines using Welford Read intel_theater_posture Get military aircraft presence across 5 theaters: European, Indo-Pacific, Middle East, Arctic, Korean Peninsul Read intel_timeline Get chronological timeline of stored intelligence data. Returns recent entries sorted by time. Filter by domai Read intel_trade_routes 19 critical maritime chokepoints and trade routes with oil flow (mbd), daily vessel transits, trade value shar Read intel_traffic_flow Real-time traffic congestion for 20 major world cities via TomTom API. Congestion percentage, speeds, global a Read intel_traffic_incidents Major traffic incidents across 5 strategic regions (US East/West, Europe, Middle East, East Asia) via TomTom A Read intel_trending_keywords Detect trending keywords from recent news headlines. Keyword spike detection across 20+ feeds. Read intel_trending_repos Get trending GitHub repositories (recently created, most starred). Optional: language filter, time window, lim Read intel_ucdp_events Get state-based violence events from UCDP GED. No API key needed. Optional: days (default 30). Read intel_undersea_cables Query 30+ undersea fiber-optic cable routes with landing points, owners, capacity (Tbps), and length (km). Fil Read intel_unrest_events Get social unrest events (protests + riots) from ACLED with Haversine deduplication. Optional: country (name), Read intel_usa_spending Federal agency spending data from USAspending.gov. Shows top agencies by budget for current fiscal year. Optio Read intel_usni_fleet US Navy fleet disposition from USNI News Fleet Tracker. Extracts ships, hull numbers, carrier strike groups, r Read intel_vector_stats Get vector store statistics: total points, collection status, embedding model info. Shows how much intelligenc Read intel_vessel_snapshot Naval activity snapshot at 9 strategic waterways (Hormuz, Malacca, Suez, etc.) from NGA navigational warnings. Read intel_webcams Public webcam locations and live previews worldwide from Windy Webcams API. Filter by category (traffic, weath Read intel_weekly_trends Analyze weekly trends from temporal baselines. Reports volatility (coefficient of variation) and current anoma Read intel_wildfires Get active wildfires from NASA FIRMS (9 global regions). Requires NASA_FIRMS_API_KEY. Read intel_world_bank_indicators Get World Bank development indicators (GDP, inflation, unemployment) for a country. Read intel_world_brief Structured daily intelligence summary: risk overview, focal areas, top story clusters, temporal anomalies, and Read intel_yield_curve Get US Treasury yield curve (2Y-30Y maturities), 2s10s and 3m10y spreads, and inversion detection. Uses FRED o Read intel_central_bank_rates Policy rates for 15 major central banks: Fed, ECB, BoE, BoJ, PBoC, RBI, RBA, BoC, SNB, BCB, BoK, CBRT, SARB, B

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Questions about Threat Intelligence MCP Server

How do I prevent bulk modifications through Threat Intelligence MCP Server? +

The Threat Intelligence MCP Server server has 1 write tools including intel_generate_report. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Threat Intelligence MCP Server.

How many tools does the Threat Intelligence MCP Server MCP server expose? +

113 tools across 4 categories: Destructive, Execute, Read, Write. 110 are read-only. 3 can modify, create, or delete data.

How do I enforce a policy on Threat Intelligence MCP Server? +

Register the Threat Intelligence MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Threat Intelligence MCP Server tool call.

Deterministic rules across all 113 Threat Intelligence MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Free to start. No card required.

113 Threat Intelligence MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.