io.github.Project-Gifted1/pg1-threat-intel

up checked 2026-11-11T02:37:39.629Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

PG1 Sovereign Threat Intelligence

Publisher-provided description

Preflight for AI agents, signed: one call; wallet, domain, IP abuse, package checks and CVEs.

Summary by lookupd

Pre-action safety checks on wallets, domains, IPs, packages, agent cards, and CVEs, with signed results for verification.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http pg1-threat-intel https://pg1-ai-agent.vercel.app/api/mcp

Codex, remote (streamable-http)

codex mcp add pg1-threat-intel --url https://pg1-ai-agent.vercel.app/api/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "pg1-threat-intel": {
      "url": "https://pg1-ai-agent.vercel.app/api/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (21 tools)

Publisher-provided text

• preflight_check PG1 Sovereign Threat Intelligence: ONE call before an agent acts. Give the action you are about to take and its target; PG1 runs every relevant check in paralle
• check_x402_endpoint PG1 Sovereign Threat Intelligence: checks an x402-paid URL before you pay it. Fetches the URL once (https only; private addresses and redirects refused) and rea
• check_agent_card PG1 Sovereign Threat Intelligence: checks another agent before you trust it. Fetches its /.well-known/agent-card.json (https only; private addresses and redirec
• check_agent_message PG1 Sovereign Threat Intelligence: a pre-read check for a message from another agent or a seller's skill.md. Call it BEFORE your own model reads the content, to
• verify_result PG1 Sovereign Threat Intelligence: verifies that a result really came from PG1, unchanged. Every PG1 tool result is signed (Ed25519) over its request hash, resu
• hosting_advisor PG1 hosting advisor: ranked regions and providers for a workload, with reasons: data-protection regime, published government data-access frameworks (factual, ci
• get_threat_indicators PG1 Sovereign Threat Intelligence: returns a STIX 2.1 bundle of CVE records from NIST NVD, the only source PG1 may currently redistribute commercially. Today it
• get_cve_details PG1 Sovereign Threat Intelligence: enriched CVE lookup combining NVD (description, CVSS score/vector) and the CISA Known Exploited Vulnerabilities catalog (acti
• get_ioc_context PG1 Sovereign Threat Intelligence: looks up a single specific indicator value (IP, domain, URL, or hash) — the recommended pre-action safety check for AI agents
• get_cve_batch PG1 Sovereign Threat Intelligence: looks up multiple CVE identifiers in a single call, each enriched with NVD description/CVSS and CISA KEV status (plus the FIR
• get_ioc_batch PG1 Sovereign Threat Intelligence: looks up multiple indicators (IPs, domains, URLs, hashes) in a single call — a batched pre-action safety check for AI agents.
• get_threat_actor_profile PG1 Sovereign Threat Intelligence: returns a dossier for a known threat actor / APT group — aliases, description, associated MITRE ATT&CK techniques, and associ
• get_cve_by_product PG1 Sovereign Threat Intelligence: returns CVEs affecting a given vendor/product (optionally a specific version), enriched with CVSS and CISA KEV status (plus E
• get_usage_status PG1 Sovereign Threat Intelligence: returns your remaining free-tier calls for today and current Gumroad license status. No payment required — this tool is alway
• submit_indicator PG1 Sovereign Threat Intelligence: submit an observed indicator for validation and possible inclusion in future query results. Requires a valid Gumroad license
• check_wallet_sanctions PG1 Sovereign Threat Intelligence: checks a cryptocurrency wallet address against the OFAC SDN (Specially Designated Nationals) sanctions list, synced daily fro
• check_domain_age PG1 Sovereign Threat Intelligence: looks up a domain's registration age via RDAP (the IANA-standardized WHOIS successor), resolved through the IANA bootstrap re
• check_hostname_reputation PG1 Sovereign Threat Intelligence: checks a single hostname against the MetaMask eth-phishing-detect blocklist/allowlist and a lookalike/typosquat detector, syn
• check_wallet_age PG1 Sovereign Threat Intelligence: reports when an EVM wallet address first appeared on a given chain, based on its earliest on-chain transfer history (in or ou
• check_ip_abuse PG1 Sovereign Threat Intelligence: looks up one public IPv4 or IPv6 address in AbuseIPDB using YOUR OWN AbuseIPDB API key (free or paid), and returns its abuse
• check_package PG1 Sovereign Threat Intelligence: a pre-install check for one npm or PyPI package - check before you install. No payment required - this tool is always free, a

Details

• Version: 1.21.1
• Transports: streamable-http
• Uptime (7 days): 100%
• Median latency: 672 ms
• First indexed: 2026-11-01T09:14:42.938Z
• Last seen in registry: 2026-11-04T11:17:20.289Z
• Repository: https://github.com/Project-Gifted1/pg1-ai-agent

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/io.github.Project-Gifted1/pg1-threat-intel.svg)](https://lookupd.com/servers/io.github.Project-Gifted1/pg1-threat-intel)

• 62092 servers
• Last crawl: 2026-11-11T17:17:22.074Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp