sh.mlab/mcp

needs login checked 2026-11-11T10:39:31.055Z

Unclaimed · Unverified

Publisher-provided title

mlab.sh

Publisher-provided description

Threat intel and DFIR: IOCs, CVEs, actors, SBOMs, domain scans, cases, memory, Kubernetes, Proxmox.

Summary by lookupd

Query threat intel, CVEs, IOCs and SBOMs, scan domains, manage DFIR cases, and inspect Kubernetes and Proxmox infrastructure.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http mcp https://mlab.sh/mcp

Claude Code, remote (sse)

claude mcp add --transport sse mcp https://mlab.sh/mcp

Codex, remote (streamable-http)

codex mcp add mcp --url https://mlab.sh/mcp

Codex, remote (sse)

codex mcp add mcp --url https://mlab.sh/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://mlab.sh/mcp"
    }
  }
}

Cursor, remote (sse) → .cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "type": "sse",
      "url": "https://mlab.sh/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/sh.mlab/mcp.svg)](https://lookupd.com/servers/sh.mlab/mcp)