Nullcone Threat Intelligence
io.github.maco144/nullcone
Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats
Description as published in the official MCP registry.
Answers the MCP handshake and lists its tools. Checked 2026-10-04.
What we measured
| Endpoint | https://nullcone.ai/mcp | registry |
|---|---|---|
| Handshake | Answers the MCP handshake and lists its tools (1,682 ms) | our check, 2026-10-04 |
| Protocol version | 2025-11-25 | our check, 2026-10-04 |
| Tools (30) | submit_ioc, submit_batch, lookup_ioc, recent_threats, family_threats, list_families, search_by_type, report_detection, vote_false_positive, poll_since, get_stats, validate_skill, scan_skill_content, get_new_threats, warm_prompt_cache, check_prompt, check_prompt_batch, prompt_cache_stats, check_freshness, freshness_limits, fingerprint_tool_metadata, registry_monitor_stats, registry_flagged_tools, subscribe_threats, drain_subscription, unsubscribe, list_subscriptions, revoke_ioc, is_ioc_revoked, list_revocations | tools/list, 2026-10-04 |
| GitHub stars | 0 | github.com/maco144/nullcone-mcp |
| Last push | 2026-07-08 | GitHub API |
| Registry version | 0.1.0 · active · updated 2026-06-06 | registry |
Signed reports
No signed reports yet. A report carries a signed decision record from the reporter's gate, so it shows a real call went through, not just an opinion. How to file one.
Connect
claude mcp add --transport http nullcone https://nullcone.ai/mcpCommands are built from the registry entry. Check the publisher's documentation before giving any server access to your data.
Related servers
- Analook — Competitor Intelligence Competitor intelligence for AI agents — SEO, traffic, social, Product Hunt, pricing, AI…
- XposedOrNot Breach Intelligence Real-time data-breach lookup and analytics for emails and domains from XposedOrNot.
- RTK Motion — Motion Capture, Biomechanics, Threat & Fleet Intelligence Mocap, rehab biomechanics, threat intel, fleet vision. 21 MCP tools, 10 free. x402/USDC…
- PG1 Sovereign Threat Intelligence STIX indicators, CVE lookups/search w/ EPSS/CISA KEV, ATT&CK dossiers, alerts & subs.
- l0g.fr Risk Intelligence Read-only macro risk analysis, evidence, signals, and source-backed research from l0g.fr.
- Domain Intelligence WHOIS/RDAP, DNS, SSL, live subdomains with IPs, and SPF/DMARC/DKIM for any domain.
Badge for your README
Shows the result of our latest check and links back to this page.
[](https://openforallofus.com/tools/io.github.maco144/nullcone)Agents can read this page as data: MCP endpoint https://openforallofus.com/api/mcp, tool get_tool with name io.github.maco144/nullcone.