Armory
Source
Browse
MCPs

pipeworx-io-threatfox

ThreatFox abuse.ch indicator-of-compromise feed for querying malware IOCs, threat actors, and malicious infrastructure via Pipeworx.

Score
Unranked
Evidence
No signals yet
Last commit
as last read from GitHub; most reads are from 2 Sep 2026 or later
Listed

Install

No one-command install. Set it up from its source.

Alternatives · MCPs

  1. darknet-mcp-server319 stars · 39 forks95.524
  2. rolandpg-zettelforge58 stars · 8 forks86.121
  3. fr0gger-mcp-security51 stars · 9 forks85.826

What it is

MCP server ThreatFox, catalogued on PulseMCP. ThreatFox abuse.ch indicator-of-compromise feed for querying malware IOCs, threat actors, and malicious infrastructure via Pipeworx.

When to use it

ThreatFox abuse.ch indicator-of-compromise feed for querying malware IOCs, threat actors, and malicious infrastructure via Pipeworx.

Notes

Listed from the PulseMCP registry. The registry does not state a license. Check it before production use.