How do I install Threatcluster?

Copy the http config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Threatcluster need an API key?

The publisher lists these environment variables: THREATCLUSTER_API_KEY, THREATCLUSTER_API_BASE.

What transport does Threatcluster use?

Threatcluster is reached over HTTP.

When was Threatcluster last checked?

Last checked 2026-11-09. Live threat intel for agents: incidents, actors, CVEs with KEV/EPSS, ransomware leak-site victims.

Threatcluster MCP server

Power your agent

Add this server

The publisher's own URL. Not a PlugMCP endpoint.

Add to Cursor Add in Claude Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Server URL

https://threatcluster.io/mcp

Credentials from the publisher

THREATCLUSTER_API_KEY — ThreatCluster API key (tc_live_... / tc_agent_...). Free keys: https://threatcluster.io/api
THREATCLUSTER_API_BASE — API base URL

The Claude button above opens Claude with the name and URL filled in. You still confirm it there.

shClaude Code

1claude mcp add --transport http io.github.jam0k-threatcluster https://threatcluster.io/mcp

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "io.github.jam0k-threatcluster": {4      "command": "npx",5      "args": [6        "-y",7        "mcp-remote",8        "https://threatcluster.io/mcp"9      ]10    }11  }12}

claude_desktop_config.json

Remote · HTTPPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Remote

Transport: http
Version: 0.2.3

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Questions

ThreatCluster: free CTI API and MCP server

A free threat intelligence API (100 credits a day, no card) and an MCP server over it. Ask Claude, Cursor or any MCP client what is new, who was hit, whether a CVE is exploited, and get answers from a live corpus of deduplicated incident clusters, actor and malware profiles, CVEs with KEV and EPSS, and ransomware leak-site victims.

An MCP server that gives Claude, Cursor, VS Code, Windsurf, Zed and any other MCP client live threat intelligence from ThreatCluster (setup guide): incident clusters (one deduplicated story per incident, with a threat score, timeline and extracted entities), entity profiles (actors, malware, tools, vendors, CVEs), CVE records with KEV / EPSS / exploit status, and ransomware leak-site victims.

It is a thin, auditable wrapper over the public REST API. Every tool call is one or two GETs to https://threatcluster.io/api/public/v1 with your API key; nothing else leaves your machine, and there is no telemetry.

Why this and not a feed aggregator

Most free CTI MCP servers wrap other people's indicator feeds (OTX, abuse.ch, AbuseIPDB). ThreatCluster is the corpus itself: every story is one cluster built from every source that covered it, with a threat score, a timeline and the entities extracted from the text, plus the leak-site victim list and CVE exploit status in the same API. The free key covers all of it with a 7-day lookback; paid plans extend the window. Details and the hosted endpoint (https://threatcluster.io/mcp) are at threatcluster.io/about/free-api.

Published twice from one tool spec, so both are identical:

Runtime	Install	Package
Python 3.10+	`uvx threatcluster-mcp` (or `pipx run threatcluster-mcp`)	PyPI: threatcluster-mcp
Node 18+	`npx -y threatcluster-mcp`	npm: threatcluster-mcp

1. Get a key

Free keys carry the five read scopes, 100 credits a day, 30 requests a minute and a 7-day lookback: https://threatcluster.io/api. Put it in THREATCLUSTER_API_KEY. If you use the tc CLI and have run tc auth login, the Python server picks that credential up automatically (keyring or the ~/.config/tc-cli/credentials file); the Node server reads the file only.

2. Add the server

Claude Code

claude mcp add threatcluster -e THREATCLUSTER_API_KEY=tc_live_... -- npx -y threatcluster-mcp
# or the Python build:
claude mcp add threatcluster -e THREATCLUSTER_API_KEY=tc_live_... -- uvx threatcluster-mcp

Claude Desktop (claude_desktop_config.json, Settings > Developer > Edit Config)

{
  "mcpServers": {
    "threatcluster": {
      "command": "npx",
      "args": ["-y", "threatcluster-mcp"],
      "env": { "THREATCLUSTER_API_KEY": "tc_live_..." }
    }
  }
}

Cursor — one-click: see listings/cursor-deeplink.md, or add to ~/.cursor/mcp.json / .cursor/mcp.json:

{ "mcpServers": { "threatcluster": { "command": "npx", "args": ["-y", "threatcluster-mcp"], "env": { "THREATCLUSTER_API_KEY": "tc_live_..." } } } }

VS Code (.vscode/mcp.json; the input prompts for the key instead of storing it in the file)

{
  "inputs": [{ "type": "promptString", "id": "tc-key", "description": "ThreatCluster API key", "password": true }],
  "servers": {
    "threatcluster": { "type": "stdio", "command": "npx", "args": ["-y", "threatcluster-mcp"], "env": { "THREATCLUSTER_API_KEY": "${input:tc-key}" } }
  }
}

Windsurf (~/.codeium/windsurf/mcp_config.json) — same mcpServers block as Claude Desktop.

Zed (settings.json)

{ "context_servers": { "threatcluster": { "command": { "path": "npx", "args": ["-y", "threatcluster-mcp"], "env": { "THREATCLUSTER_API_KEY": "tc_live_..." } } } } }

Check a configuration without starting a client: THREATCLUSTER_API_KEY=... npx -y threatcluster-mcp --check (prints where the key came from and where it will be sent — never the key).

3. Tools

Costs are ThreatCluster API credits (free keys: 100 a day). Every result carries cost (credits this call spent), budget (remaining today, from the response headers), as_of, and url fields on every cluster, entity, victim and CVE for citation.

Tool	What it answers	API endpoint(s)	Credits
`search_threats`	Keyword search over incident clusters; phrase, then all words, then any word; `matched_stage` says which	`GET /threats?keyword=` per term	1 per term (max 8 calls)
`search_everything`	Clusters, entity profiles and dark-web hits in one call	`GET /search`	5
`newest_threats`	What is new in 1h / 24h / 7d / 30d, by first report or by momentum	`GET /threats`	1
`get_threat`	Full record for one cluster: summary, timeline, articles, entities; `include_iocs` adds validated indicators	`GET /threats/{id}` (+ `/iocs`)	1 (+1)
`leak_site_victims`	Ransomware leak-site listings by sector / group / country / victim, plus a tally of the whole window	`GET /darkweb/ransomware/victims` + `/facets`	2
`lookup_entity`	Profile of an actor, malware, tool, vendor, product, country, industry or CVE	`GET /entities/search` + `GET /entities/{type}/{value}`	2
`get_vulnerability`	One CVE: CVSS, EPSS, KEV with due date, exploits, vendors, products	`GET /vulnerabilities/{cve_id}`	1
`exploited_vulnerabilities`	CVEs in a window filtered to KEV / public exploit / severity / vendor / product	`GET /vulnerabilities`	1
`trending_entities`	Actors, malware, tools, vendors, CVEs, countries rising over a window	`GET /entities/trending`	1
`api_budget`	Remaining credits and rate state from the last responses — no API call	—	0

One prompt, threatcluster_analyst, carries the analyst rules (tools first, cite every fact with the returned url, say what period you searched, leak-site listings are claims).

Errors come back as MCP tool errors with the API's own message: 401 tells the agent to set THREATCLUSTER_API_KEY and where a free key comes from, 429 carries the Retry-After, 403 names the missing scope or the lookback window and the plan that lifts it.

Security

The key is read from THREATCLUSTER_API_KEY (then TC_REFRESH_TOKEN, then the tc-cli store) and sent only as the X-API-Key header (or Authorization: Bearer for a JWT minted by tc login) to THREATCLUSTER_API_BASE.
It is never logged, never printed by --check, never written to disk, and scrubbed from every error string; the test suites assert the key is absent from all stdout and stderr bytes, including on a 401 whose body quotes it.
stdio only. No outbound connection other than the API. No analytics.
All tools are read-only (readOnlyHint: true) and validate arguments against the spec before any request is made.

Environment

Variable	Default	Purpose
`THREATCLUSTER_API_KEY`	—	your key (`tc_live_…`, `tc_agent_…`) or a bearer from `tc login`
`THREATCLUSTER_API_BASE`	`https://threatcluster.io/api/public/v1`	API base (self-hosted or local test servers)
`THREATCLUSTER_SITE`	`https://threatcluster.io`	base for the `url` fields in results

Repository layout

tools/tools.json   the single source of truth: tools, schemas, endpoint mapping, credits, prompt
python/            PyPI package (hatchling; mcp + httpx)          -> console script threatcluster-mcp
node/              npm package (TypeScript; @modelcontextprotocol/sdk + zod) -> bin threatcluster-mcp
tests/fixtures/    recorded API responses and tool outputs; both packages must replay them identically
listings/          directory manifests and submission copy (Smithery, MCP registry, Glama, mcp.so, Cursor, VS Code)
.github/workflows/ CI (both suites) and tag-triggered publishing (PyPI trusted publishing, npm provenance)

python3 tools/sync_tools.py copies the spec into both packages; CI fails if the copies drift.

Development

pip install -e "python/[test]" && (cd python && pytest)
cd node && npm install && npm test
# live validation against a real API (spends ~30 credits, re-records tests/fixtures):
THREATCLUSTER_LIVE=1 THREATCLUSTER_API_KEY=... THREATCLUSTER_API_BASE=... pytest python/tests/test_live.py

Related: the tc CLI, the API reference, the agent-tool recipe for a bare tool-calling function, and the integration guide.

Threatcluster

Add this server

Host a copy with our keys and logs.

Server facts

Tools

Questions

How do I install Threatcluster?

Does Threatcluster need an API key?

What transport does Threatcluster use?

When was Threatcluster last checked?

Documentation

ThreatCluster: free CTI API and MCP server

Why this and not a feed aggregator

1. Get a key

2. Add the server

3. Tools

More on threatcluster.io

Security

Environment

Repository layout

Development