io.github.0xDanielLopez/tweetfeed
up checked
Unclaimed · Unverified
Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.
Publisher-provided title
TweetFeed
Publisher-provided description
IOCs (URLs, domains, IPs, hashes) shared by the infosec community on X/Twitter. No auth, CC0.
Summary by lookupd
Look up and query community-shared threat indicators (URLs, domains, IPs, hashes), check campaigns, trends, and feed health.
Install
Claude Code, remote (streamable-http)
claude mcp add --transport http tweetfeed https://mcp.tweetfeed.live/
Codex, remote (streamable-http)
codex mcp add tweetfeed --url https://mcp.tweetfeed.live/
Cursor, remote (streamable-http) → .cursor/mcp.json
{
"mcpServers": {
"tweetfeed": {
"url": "https://mcp.tweetfeed.live/"
}
}
}Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.
Tools (14 tools)
Publisher-provided text
query_iocsQuery the TweetFeed API for Indicators of Compromise (IOCs: URLs, domains, IPs, MD5/SHA256 hashes) shared by the infosec community on Twitter/X. Returns matchincheck_urlCheck whether a URL (or substring) appears in the TweetFeed corpus over the past 30 days. Useful for confirming if an observed URL has been flagged by the publicheck_ipCheck whether an IP address appears in the TweetFeed corpus. Exact match over the past 365 days (falls back to a 30-day substring window if there's no exact hitcheck_hashCheck whether a file hash (MD5 or SHA-256) appears in the TweetFeed corpus. Exact match over the past 365 days (falls back to a 30-day window if there's no exaclist_recent_iocsList TweetFeed IOCs added since a given date, useful for delta-syncing a blocklist or Threat Intelligence pipeline. Source is the 30-day month window so 'since'get_tag_infoBundle of TweetFeed activity for a single tag: aggregate counts across today/week/month/year windows plus the most recent IOCs. Saves the agent from making threget_trendingTop tags and IOC-type distribution for a given time window, computed from the live counts.json aggregate. Useful for 'what is the infosec community talking abouenrich_iocLook up an IOC value in TweetFeed. First an EXACT lookup over the past 365 days (aggregated: first_seen, last_seen, count, reporters, tags, last source tweets;get_campaignsAI-clustered campaign groupings of the last 30 days of community-shared TweetFeed IOCs: each campaign bundles related URLs/domains/IPs/hashes under a name, a shget_campaign_iocsReturn the full IOC membership of one AI-clustered campaign from the trailing 30-day window: campaign header (name, context, MITRE ATT&CK ttps, targeted_sector,get_trendsIOC trend analytics from the last 31 days: daily volume by type, top moving tags week-over-week, most-abused TLDs, new vs recurring indicator ratio, and feed prget_feed_statusLive health of the TweetFeed pipeline: a freshness verdict per artifact (stale, age_seconds) and source coverage (which hashtag/account X feeds delivered rows isearchSearch TweetFeed (CC0 IOC feed from the infosec Twitter/X community) for a document id to pass to fetch. Accepts an IOC value (URL, domain, IP, MD5/SHA256), a tfetchFetch the full TweetFeed document for an id returned by search: ioc:<value> (365-day exact lookup with AI/corroboration/registration context, archive and campai
Details
- Version: 0.1.0
- Transports: streamable-http
- Uptime (7 days): 100%
- Median latency: 344 ms
- First indexed:
- Last seen in registry:
- Repository: https://github.com/0xDanielLopez/tweetfeed-mcp
- Website: https://tweetfeed.live
Badge for your README
Shows this live status and links here; updates hourly.
[](https://lookupd.com/servers/io.github.0xDanielLopez/tweetfeed)
- 62092 servers
- Last crawl: 2026-11-11T17:17:22.074Z
- API base:
https://api.lookupd.com - MCP URL:
https://api.lookupd.com/mcp