MCP server

Jeevesus — DugganUSA threat-intel MCP

io.github.pduggusa/dugganusa-threat-intel

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Membrane for AI agents: threat intel you can check, IOC enrichment, pre-install package checks.

Website Source

At a glance

Type

MCP server

Publisher

Not verified

Status

Working at last check

Tools

7

Token cost

About 3,435 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http dugganusa-threat-intel https://analytics.dugganusa.com/api/v1/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.dugganusa-threat-intel]
url = "https://analytics.dugganusa.com/api/v1/mcp"

Gemini CLI

{"mcpServers":{"dugganusa-threat-intel":{"httpUrl":"https://analytics.dugganusa.com/api/v1/mcp"}}}

Cursor

{"mcpServers":{"dugganusa-threat-intel":{"url":"https://analytics.dugganusa.com/api/v1/mcp"}}}

VS Code

{"servers":{"dugganusa-threat-intel":{"type":"http","url":"https://analytics.dugganusa.com/api/v1/mcp"}}}

Antigravity

agy mcp add dugganusa-threat-intel https://analytics.dugganusa.com/api/v1/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"dugganusa-threat-intel","server_url":"https://analytics.dugganusa.com/api/v1/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"dugganusa-threat-intel","server_url":"https://analytics.dugganusa.com/api/v1/mcp"}

Tools

• ai-model-price ~390 tokens
  Looks up what an AI model or an agent session costs at list price. Prices are dated and copied from each provider's own pricing page. Returns the per-1M-token USD rates for a model (input, output, and for Anthropic models the 5-minute and 1-hour cache write, cache read and fast-mode rates), the dat
• check-package ~725 tokens
  Checks whether a dependency (npm, PyPI, RubyGems or Packagist/Composer, or a GitHub Action used in a workflow) is on the DugganUSA malicious-package deny-list or has published advisories. Suited to a pre-install step in an agent or a CI pipeline, against slopsquatting and hijacked-package attacks.
• enrich-ioc ~550 tokens
  Looks up an IP address, domain, URL or file hash, such as one from a message, log line, SIEM alert or code under review. Look up a single indicator of compromise (IP, domain, URL, or hash) in the DugganUSA corpus. Returns the threat type, malware family, confidence and references of the record with
• kev-exploitation-stickiness ~325 tokens
  Measures whether a product's exploitation risk is chronic or a one-off, for patch prioritization. Does in-the-wild exploitation risk STICK to proven products, or SPREAD to new ones? Analyzes CISA KEV: correlates each product's historical known-exploited count against its RECENT KEV additions (Spear
• kev-vendor-risk ~441 tokens
  Shows where confirmed exploitation concentrates for a vendor or product (Microsoft, Cisco, Fortinet, an appliance, an ERP), for questions like "what should I patch first". Vendor / product risk matrix built from CISA's Known Exploited Vulnerabilities (KEV) catalog — where real, confirmed in-the-wil
• search ~652 tokens
  Searches threat-intelligence records about threat actors, malware, campaigns, CVEs, breaches, vendors and indicators. The default search covers security topics only; a few public-document archives can be searched by naming them (listed below). It holds no general programming or web content. Hybrid
• stix-feed-summary ~352 tokens
  Summarizes what is in the feed right now: useful for "what's active this week", feed freshness, or planning SIEM / blocklist ingestion. Shape report on the most recent 5,000 indicators in the DugganUSA STIX 2.1 feed, bounded to a 1-7 day window. Returns how many of those fall in the window (capped

Browse

• Claude tools
• GitHub tools
• Email marketing
• Company data
• GitHub and code hosting
• Security scanning

Related MCP servers

• Pulsedive
  Pulsedive MCP — threat-intelligence IOC enrichment (pulsedive.com)
• Dredd MCP
  Pre-flight verdict on MCP servers: known-bad identity, CVEs, dependency tree, tool drift. Signed.
• PG1 Sovereign Threat Intelligence
  Preflight for AI agents, signed: one call; wallet, domain, IP abuse, package checks and CVEs.
• Sectora
  Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.
• OT Intel API
  OT/ICS threat intel for AI agents: 40 tools, pay per call in USDC on Base via x402.
• ContrastAPI
  55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
• BlackVeil DNS & Email Security Scanner
  DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.
• Dragons Eye Ransomware Claims
  Ransomware claim lookups, IOC and CVE intel, group intel, bulk checks and watch alerts (x402 USDC).

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.pduggusa/dugganusa-threat-intel.svg)](https://aptlynx.net/servers/io.github.pduggusa/dugganusa-threat-intel)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents