com.dugganusa/threat-intel

up checked 2026-11-10T18:37:31.010Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

Jeevesus — DugganUSA threat-intel MCP

Publisher-provided description

Membrane for AI agents: threat intel you can check, IOC enrichment, pre-install package checks.

Summary by lookupd

Enriches IOCs, checks packages and workflows for malicious or unsafe code, and searches threat-intel records on actors, CVEs and campaigns.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http threat-intel https://analytics.dugganusa.com/api/v1/mcp

Codex, remote (streamable-http)

codex mcp add threat-intel --url https://analytics.dugganusa.com/api/v1/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "threat-intel": {
      "url": "https://analytics.dugganusa.com/api/v1/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (10 tools)

Publisher-provided text

• search Searches threat-intelligence records about threat actors, malware, campaigns, CVEs, breaches, vendors and indicators. The default search covers security topics
• enrich-ioc Looks up an IP address, domain, URL or file hash, such as one from a message, log line, SIEM alert or code under review. Look up a single indicator of compromi
• correlate Answers two different questions about an IP address or domain, and keeps them apart: do we HOLD it, and what sits NEXT to it. `held` is an exact yes or no, wit
• stix-feed-summary Shows what is in the feed right now: useful for "what's active this week", feed freshness, or planning SIEM / blocklist ingestion. Shape report on the most rec
• ai-model-price Looks up what an AI model or an agent session costs at list price. Prices are dated and copied from each provider's own pricing page. Returns the per-1M-token
• kev-vendor-risk Shows where confirmed exploitation concentrates for a vendor or product (Microsoft, Cisco, Fortinet, an appliance, an ERP), for questions like "what should I pa
• kev-exploitation-stickiness Measures whether a product's exploitation risk is chronic or a one-off, for patch prioritization. Does in-the-wild exploitation risk STICK to proven products,
• check-package Checks whether a dependency (npm, PyPI, RubyGems or Packagist/Composer, or a GitHub Action used in a workflow) is on the DugganUSA malicious-package deny-list o
• check-workflow Checks the text of one GitHub Actions workflow file for script injection: places where text an outside user controls (an issue or pull request title or body, a
• check-repo Before you open or run a repository someone else sent you (a recruiter's coding test, a downloaded zip, a proof of concept), pass it the few files that matter a

Details

• Version: 1.2.0
• Transports: streamable-http
• Uptime (7 days): 100%
• Median latency: 501 ms
• First indexed: 2026-11-09T19:17:11.998Z
• Last seen in registry: 2026-11-09T19:17:11.998Z
• Repository: https://github.com/pduggusa/enterprise-extraction-platform
• Website: https://analytics.dugganusa.com/api/v1/mcp

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/com.dugganusa/threat-intel.svg)](https://lookupd.com/servers/com.dugganusa/threat-intel)

• 62071 servers
• Last crawl: 2026-11-11T16:17:25.167Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp