com.ransomware-tracker.api/dragonseye

up checked 2026-11-11T05:38:15.834Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

Dragons Eye Ransomware Claims

Publisher-provided description

Ransomware claim lookups, IOC and CVE intel, group intel, bulk checks and watch alerts (x402 USDC).

Summary by lookupd

Lets an agent look up ransomware leak-site claims, CVE and IOC intel, and vendor risk data, with paid bulk checks and watch alerts.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http dragonseye https://api.ransomware-tracker.com/mcp

Codex, remote (streamable-http)

codex mcp add dragonseye --url https://api.ransomware-tracker.com/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "dragonseye": {
      "url": "https://api.ransomware-tracker.com/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (16 tools)

Publisher-provided text

• validate_query Free. Check and normalize a company name or domain before calling lookup_victim; tells you whether it will be searched as a domain or a name. Offline: no networ
• pricing Free. Return the price of every paid tool, the payment network (Base) and address, the licensed data sources, and the 'unverified claim' label every result carr
• lookup_victim Search ransomware leak-site claims for one company name or domain: has a group claimed it? Returns matching claims with group, claimed date, first-observed date
• recent_claims List the newest ransomware leak-site claims (1-10), optionally filtered to one group such as akira or qilin. Use it to watch recent activity; use lookup_victim
• group_profile Get a profile of one ransomware group: aliases, when RansomLook first observed it, and a sample of its newest claims. Use it to understand who a group is; use r
• batch_exposure_check Check up to 25 vendor or supplier domains in one call for ransomware leak-site claims, for third-party-risk reviews. Returns one result per domain (found, claim
• vendor_risk_report Build a third-party ransomware risk report for up to 100 vendors (domains or company names). For each vendor: matching leak-site claims (group, claimed and firs
• bulk_vendor_check Check up to 100 vendors (domains or company names) for ransomware leak-site claims in one call: per vendor, matching claims (group, dates, sources), claim count
• indicator_check Check one domain (or its parent domains) or IPv4 address against ThreatCluster's high-confidence 30-day IOC feed: is it listed as attacker infrastructure (C2, p
• indicator_batch_check Same as indicator_check for up to 100 domains or IPv4 addresses in one call (one flat price). Costs $0.25 USDC per call via x402 (payment goes in _meta["x402/pa
• cve_status Retired compatibility tool. Returns a retirement error and static directions to existing paid cve_intel; no CVE status or availability data. Paid detail does no
• cve_intel Everything an agent needs to prioritize one CVE: CVSS, affected vendors/products, vendor advisories, CISA KEV status and known ransomware use, EPSS, recorded pu
• cve_batch_intel cve_intel for up to 50 CVEs in one call. Charged only if every CVE is cached; otherwise an error lists the ids with no data and the covered ids to retry with (n
• group_intel Threat-hunting profile of one active ransomware group: total and recent leak-site listings with a momentum status, reported tools, malware, campaigns, ATT&CK te
• coverage Retired compatibility tool. Returns a retirement error and static directions to existing paid indicator_check, cve_intel and group_intel. These answer specific
• watch_status Free. Status of a paid vendor watch (created with HTTP POST /v1/watch): items, expiry, last check, last webhook delivery. Needs the webhook_secret from creation

Details

• Version: 1.5.0
• Transports: streamable-http
• Uptime (7 days): 100%
• Median latency: 526 ms
• First indexed: 2026-11-01T08:57:15.156Z
• Last seen in registry: 2026-11-01T08:57:15.344Z
• Website: https://api.ransomware-tracker.com/llms.txt

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/com.ransomware-tracker.api/dragonseye.svg)](https://lookupd.com/servers/com.ransomware-tracker.api/dragonseye)

• 62071 servers
• Last crawl: 2026-11-11T16:17:25.167Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp