MCP Threat Intel ORKL
This is a threat intel MCP server connected to the ORKL API to retrieve threat report and ask for IOCs, Threat Actors and breaches.
fr0gger
README
ORKL MCP Server
A full write-up can be found here: https://blog.securitybreak.io/building-a-threat-intelligence-genai-reporter-with-orkl-and-claude-a0ae2e969693
A Model Context Protocol (MCP) server for querying the ORKL API. This server provides tools for fetching and analyzing threat reports, threat actors, and sources. It integrates smoothly with MCP-compatible applications.
Quick Install
Edit or create the file /Users/user/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"orkl": {
"command": "uv",
"args": [
"--directory",
"/MyMCP/mcptest/orkl",
"run",
"orkl"
]
}
}
}
Tools
Report Tools
Fetch Latest Threat Reports
- Name:
fetch_latest_threat_reports - Description: Fetch recent threat reports with their titles and IDs.
- Parameters: None
Fetch Threat Report Details
- Name:
fetch_threat_report_details - Description: Retrieve detailed information for a specific threat report by ID.
- Parameters:
report_id(required): The ID of the threat report.
Threat Actor Tools
Fetch Threat Actors
- Name:
fetch_threat_actors - Description: Fetch a list of known threat actors with their IDs and names.
- Parameters: None
Fetch Threat Actor Details
- Name:
fetch_threat_actor_details - Description: Retrieve detailed information for a specific threat actor by ID.
- Parameters:
actor_id(required): The ID of the threat actor.
Source Tools
Fetch Sources
- Name:
fetch_sources - Description: Fetch a list of sources used in threat intelligence.
- Parameters: None
Fetch Source Details
- Name:
fetch_source_details - Description: Retrieve detailed metadata for a specific source by ID.
- Parameters:
source_id(required): The ID of the source.
Recommended Servers
MCP PubMed Search
Server to search PubMed (PubMed is a free, online database that allows users to search for biomedical and life sciences literature). I have created on a day MCP came out but was on vacation, I saw someone post similar server in your DB, but figured to post mine.
dbt Semantic Layer MCP Server
A server that enables querying the dbt Semantic Layer through natural language conversations with Claude Desktop and other AI assistants, allowing users to discover metrics, create queries, analyze data, and visualize results.
mixpanel
Connect to your Mixpanel data. Query events, retention, and funnel data from Mixpanel analytics.
Sequential Thinking MCP Server
This server facilitates structured problem-solving by breaking down complex issues into sequential steps, supporting revisions, and enabling multiple solution paths through full MCP integration.
Crypto Price & Market Analysis MCP Server
A Model Context Protocol (MCP) server that provides comprehensive cryptocurrency analysis using the CoinCap API. This server offers real-time price data, market analysis, and historical trends through an easy-to-use interface.
Nefino MCP Server
Provides large language models with access to news and information about renewable energy projects in Germany, allowing filtering by location, topic (solar, wind, hydrogen), and date range.
Vectorize
Vectorize MCP server for advanced retrieval, Private Deep Research, Anything-to-Markdown file extraction and text chunking.
MCP-Logic
MCP-Logic is a server that provides AI systems with automated reasoning capabilities, enabling logical theorem proving and model verification using Prover9/Mace4 through a clean MCP interface.
Mentor MCP Server
Provides LLM Agents with AI-powered mentorship for code review, design critique, writing feedback, and brainstorming using the Deepseek API, enabling enhanced output in various development and strategic planning tasks.
Substack Reader
Enables fetching and reading subscriber-only content from Trade Companion by Adam Mancini on Substack, allowing Claude to access and discuss the latest financial trading articles.