abuse.ch

ThreatFox MCP server

ThreatFox MCP server

ThreatFox MCP server

for Claude, ChatGPT, Cursor and your own agents

for Claude, ChatGPT, Cursor and your own agents

for Claude, ChatGPT, Cursor and your own agents

Expose ThreatFox to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesnโ€™t ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.

Expose ThreatFox to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesnโ€™t ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.

9

operation

s

available

Complete and up-to-date endpoint coverage by Mindflow.

9

operation

s

available

Complete and up-to-date endpoint coverage by Mindflow.

9

operation

s

available

Complete and up-to-date endpoint coverage by Mindflow.

Our customers scale automation with security built in.

Tools exposed by this MCP server

Every ThreatFox operation, as an MCP tool

Every ThreatFox operation, as an MCP tool

Each API operation becomes a tool your AI client can call. You decide which ones: allow reads, require approval before sensitive writes and block the rest. A few of the most used:

  • ThreatFox

    ThreatFox

    Get ioc by id in threatfox

    Get ioc by id in threatfox

  • ThreatFox

    ThreatFox

    Get ioc by tag in threatfox

    Get ioc by tag in threatfox

  • ThreatFox

    ThreatFox

    Get list of malware in threatfox

    Get list of malware in threatfox

  • ThreatFox

    ThreatFox

    Get list of tags in threatfox

    Get list of tags in threatfox

  • ThreatFox

    ThreatFox

    Get malware information in threatfox

    Get malware information in threatfox

  • ThreatFox

    ThreatFox

    Get malware label and aliases in threatfox

    Get malware label and aliases in threatfox

  • ThreatFox

    ThreatFox

    Get recent iocs in threatfox

    Get recent iocs in threatfox

  • ThreatFox

    ThreatFox

    Search for hash ioc in threatfox

    Search for hash ioc in threatfox

  • ThreatFox

    ThreatFox

    Search for network ioc in threatfox

    Search for network ioc in threatfox

  • ThreatFox

    Get ioc by id in threatfox

  • ThreatFox

    Get ioc by tag in threatfox

  • ThreatFox

    Get list of malware in threatfox

  • ThreatFox

    Get list of tags in threatfox

  • ThreatFox

    Get malware information in threatfox

  • ThreatFox

    Get malware label and aliases in threatfox

  • ThreatFox

    Get recent iocs in threatfox

  • ThreatFox

    Search for hash ioc in threatfox

  • ThreatFox

    Search for network ioc in threatfox

  • ThreatFox

    ThreatFox

    Search for network ioc in threatfox

    Search for network ioc in threatfox

  • ThreatFox

    ThreatFox

    Search for hash ioc in threatfox

    Search for hash ioc in threatfox

  • ThreatFox

    ThreatFox

    Get recent iocs in threatfox

    Get recent iocs in threatfox

  • ThreatFox

    ThreatFox

    Get malware label and aliases in threatfox

    Get malware label and aliases in threatfox

  • ThreatFox

    ThreatFox

    Get malware information in threatfox

    Get malware information in threatfox

  • ThreatFox

    ThreatFox

    Get list of tags in threatfox

    Get list of tags in threatfox

  • ThreatFox

    ThreatFox

    Get list of malware in threatfox

    Get list of malware in threatfox

  • ThreatFox

    ThreatFox

    Get ioc by tag in threatfox

    Get ioc by tag in threatfox

  • ThreatFox

    ThreatFox

    Get ioc by id in threatfox

    Get ioc by id in threatfox

  • ThreatFox

    Search for network ioc in threatfox

  • ThreatFox

    Search for hash ioc in threatfox

  • ThreatFox

    Get recent iocs in threatfox

  • ThreatFox

    Get malware label and aliases in threatfox

  • ThreatFox

    Get malware information in threatfox

  • ThreatFox

    Get list of tags in threatfox

  • ThreatFox

    Get list of malware in threatfox

  • ThreatFox

    Get ioc by tag in threatfox

  • ThreatFox

    Get ioc by id in threatfox

Connect ThreatFox to your AI client in three steps.

01

Connect the service

Add ThreatFox in Mindflow with its credentials. They stay in Mindflow and never reach the AI client.

02

Choose the tools

Pick the operations each AI client may call. Allow reads, require approval before sensitive writes and block the rest.

03

Connect your AI client

Point Claude, ChatGPT, Cursor or your own agent to your MCP Gateway endpoint, then check real calls in the audit log.

Use cases

Use cases

What your AI agents can do with ThreatFox

What your AI agents can do with ThreatFox

AI clients

Mindflow

ThreatFox

โ†’ Detect novel malware threats rapidly by automating queries to retrieve recent IOCs and malware lists, enabling immediate update of security controls โ†’ Enrich incident investigation by automatically fetching detailed malware labels, aliases, and IOC metadata through expert tag-based and hash-based searches โ†’ Streamline threat hunting workflows by integrating network IOC searches with real-time data retrieval to provide actionable intelligence within existing security platforms

โ†’ Detect novel malware threats rapidly by automating queries to retrieve recent IOCs and malware lists, enabling immediate update of security controls โ†’ Enrich incident investigation by automatically fetching detailed malware labels, aliases, and IOC metadata through expert tag-based and hash-based searches โ†’ Streamline threat hunting workflows by integrating network IOC searches with real-time data retrieval to provide actionable intelligence within existing security platforms

Every call goes through one governed endpoint.

Every call goes through one governed endpoint.

Your AI clients get access. You keep control.

Your AI clients get access. You keep control.

Every call to ThreatFox goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.

Every call to ThreatFox goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.

ThreatFox MCP server

Live

RBAC ยท SecOps

Scoped credentials

Audit log

Get ioc by id in threatfox

Allowed

Get ioc by tag in threatfox

Allowed

Get list of malware in threatfox

Needs approval

Get list of tags in threatfox

Blocked

Every call logged ยท Export to SIEM

Put this MCP server to work.

Bring one AI client and the tools it needs. Weโ€™ll show you the setup in Mindflow, from scoped access to the audit log.

Put this MCP server to work.

Bring one AI client and the tools it needs. Weโ€™ll show you the setup in Mindflow, from scoped access to the audit log.

Less busywork. More possibility.

Let your agents handle the routine. Make room for what comes next.

Automation intelligence, delivered monthly.

Product releases, automation playbooks, and security research โ€” straight to your inbox. No spam, unsubscribe anytime.

ยฉ 2026 Mindflow โ€” All rights reserved.

SOC 2 Type II
ISO 27001
GDPR
France 2030
Bpifrance
รŽle-de-France

Less busywork. More possibility.

Let your agents handle the routine. Make room for what comes next.

Automation intelligence, delivered monthly.

Product releases, automation playbooks, and security research โ€” straight to your inbox. No spam, unsubscribe anytime.

ยฉ 2026 Mindflow โ€” All rights reserved.

SOC 2 Type II
ISO 27001
GDPR
France 2030
Bpifrance
รŽle-de-France

Less busywork. More possibility.

Let your agents handle the routine. Make room for what comes next.

Automation intelligence, delivered monthly.

Product releases, automation playbooks, and security research โ€” straight to your inbox. No spam, unsubscribe anytime.

ยฉ 2026 Mindflow โ€” All rights reserved.

SOC 2 Type II
ISO 27001
GDPR
France 2030
Bpifrance
รŽle-de-France