Loading…
Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans
isMalicious threat intelligence for AI agents is an MCP server entry in ChatHome Skills, sourced from Official MCP Registry and scored 78/100. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding isMalicious threat intelligence for AI agents to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.
mcp add com.ismalicious/mcp-server https://api.ismalicious.com/mcpReview the upstream source before running this command.
{
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "active",
"isLatest": true,
"updatedAt": "2026-10-23T15:22:20.028483Z",
"publishedAt": "2026-10-23T15:22:20.028483Z",
"statusChangedAt": "2026-10-23T15:22:20.028483Z"
}
},
"server": {
"name": "com.ismalicious/mcp-server",
"title": "isMalicious threat intelligence for AI agents",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://api.ismalicious.com/mcp",
"type": "streamable-http",
"headers": [
{
"name": "Authorization",
"isSecret": true,
"isRequired": true,
"description": "Bearer <apiKey>:<apiSecret>, the key pair from https://ismalicious.com/app/account. Every tool but check_password_exposure (local only) and bootstrap_key."
}
]
}
],
"version": "0.8.0",
"packages": [
{
"version": "0.8.0",
"transport": {
"type": "stdio"
},
"identifier": "@ismalicious/mcp-server",
"registryType": "npm",
"registryBaseUrl": "https://registry.npmjs.org",
"environmentVariables": [
{
"name": "ISMALICIOUS_API_KEY",
"isSecret": true,
"description": "API key from https://ismalicious.com/app/account. Optional: without it the server starts in bootstrap mode and offers bootstrap_key."
},
{
"name": "ISMALICIOUS_API_SECRET",
"isSecret": true,
"description": "API secret paired with the key"
},
{
"name": "ISMALICIOUS_API_BASE",
"description": "API base URL (defaults to https://ismalicious.com/api; https://api.ismalicious.com reaches the API host directly)"
},
{
"name": "ISMALICIOUS_TIMEOUT_MS",
"description": "Replaces every tool's timeout, in milliseconds (defaults: gate 15000, check_indicator 25000, CVE and exploited_cves 10000, search_indicators 20000, check_indicators 60000, check_password_exposure 10000, scan_email 20000, watch_domain 30000, watch_dependencies 45000, ack_finding 10000). ISMALICIOUS_TIMEOUT_<TOOL>_MS, e.g. ISMALICIOUS_TIMEOUT_CHECK_INDICATOR_MS, sets one tool's timeout and wins over it"
},
{
"name": "ISMALICIOUS_WEB_BASE",
"description": "Base URL for bootstrap_key, a route only https://ismalicious.com/api serves (defaults to ISMALICIOUS_API_BASE, or https://ismalicious.com/api when that is api.ismalicious.com)"
},
{
"name": "ISMALICIOUS_CACHE_TTL_S",
"description": "Result cache: 0 turns it off; N caps every tool's cache lifetime at N seconds (never raises one)"
},
{
"name": "ISMALICIOUS_PREWARM",
"description": "0 (or false, off, no) skips the one unauthenticated GET /health sent after initialize to open the connection"
}
]
}
],
"repository": {
"url": "https://github.com/hexablob/ismalicious-mcp-server",
"source": "github"
},
"websiteUrl": "https://ismalicious.com/prompt-injection-scanner",
"description": "Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans"
}
}