
AbuseTotal
AbuseTotal MCP server
AbuseTotal MCP server
AbuseTotal MCP server
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
AbuseTotal MCP server
AbuseTotal MCP server
AbuseTotal MCP server
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
Expose AbuseTotal to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesnโt ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.
Expose AbuseTotal to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesnโt ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.

17
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.

17
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.

17
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.
Our customers scale automation with security built in.
Tools exposed by this MCP server
Every AbuseTotal operation, as an MCP tool
Every AbuseTotal operation, as an MCP tool
Each API operation becomes a tool your AI client can call. You decide which ones: allow reads, require approval before sensitive writes and block the rest. A few of the most used:

AbuseTotal
AbuseTotal
Create stix
Create stix

AbuseTotal
AbuseTotal
Create submission
Create submission

AbuseTotal
AbuseTotal
Delete scan
Delete scan

AbuseTotal
AbuseTotal
Get latest submissions
Get latest submissions

AbuseTotal
AbuseTotal
Get network countries
Get network countries

AbuseTotal
AbuseTotal
Get network zones
Get network zones

AbuseTotal
AbuseTotal
Get observable by uuid
Get observable by uuid

AbuseTotal
AbuseTotal
Get scan by uuid
Get scan by uuid

AbuseTotal
AbuseTotal
Get scan comments
Get scan comments

AbuseTotal
AbuseTotal
Get scan objects
Get scan objects

AbuseTotal
AbuseTotal
Get scans by user
Get scans by user

AbuseTotal
AbuseTotal
Get submissions
Get submissions

AbuseTotal
AbuseTotal
Retrieve vortex
Retrieve vortex

AbuseTotal
AbuseTotal
Search stix
Search stix

AbuseTotal
AbuseTotal
Submit to vortex
Submit to vortex

AbuseTotal
AbuseTotal
Update stix
Update stix

AbuseTotal
Create stix

AbuseTotal
Create submission

AbuseTotal
Delete scan

AbuseTotal
Get latest submissions

AbuseTotal
Get network countries

AbuseTotal
Get network zones

AbuseTotal
Get observable by uuid

AbuseTotal
Get scan by uuid

AbuseTotal
Get scan comments

AbuseTotal
Get scan objects

AbuseTotal
Get scans by user

AbuseTotal
Get submissions

AbuseTotal
Retrieve vortex

AbuseTotal
Search stix

AbuseTotal
Submit to vortex

AbuseTotal
Update stix

AbuseTotal
AbuseTotal
Update stix
Update stix

AbuseTotal
AbuseTotal
Submit to vortex
Submit to vortex

AbuseTotal
AbuseTotal
Search stix
Search stix

AbuseTotal
AbuseTotal
Retrieve vortex
Retrieve vortex

AbuseTotal
AbuseTotal
Get submissions
Get submissions

AbuseTotal
AbuseTotal
Get scans by user
Get scans by user

AbuseTotal
AbuseTotal
Get scan objects
Get scan objects

AbuseTotal
AbuseTotal
Get scan comments
Get scan comments

AbuseTotal
AbuseTotal
Get scan by uuid
Get scan by uuid

AbuseTotal
AbuseTotal
Get observable by uuid
Get observable by uuid

AbuseTotal
AbuseTotal
Get network zones
Get network zones

AbuseTotal
AbuseTotal
Get network countries
Get network countries

AbuseTotal
AbuseTotal
Get latest submissions
Get latest submissions

AbuseTotal
AbuseTotal
Delete scan
Delete scan

AbuseTotal
AbuseTotal
Create submission
Create submission

AbuseTotal
AbuseTotal
Create stix
Create stix

AbuseTotal
Update stix

AbuseTotal
Submit to vortex

AbuseTotal
Search stix

AbuseTotal
Retrieve vortex

AbuseTotal
Get submissions

AbuseTotal
Get scans by user

AbuseTotal
Get scan objects

AbuseTotal
Get scan comments

AbuseTotal
Get scan by uuid

AbuseTotal
Get observable by uuid

AbuseTotal
Get network zones

AbuseTotal
Get network countries

AbuseTotal
Get latest submissions

AbuseTotal
Delete scan

AbuseTotal
Create submission

AbuseTotal
Create stix
Connect AbuseTotal to your AI client in three steps.
01
Connect the service
Add AbuseTotal in Mindflow with its credentials. They stay in Mindflow and never reach the AI client.
02
Choose the tools
Pick the operations each AI client may call. Allow reads, require approval before sensitive writes and block the rest.
03
Connect your AI client
Point Claude, ChatGPT, Cursor or your own agent to your MCP Gateway endpoint, then check real calls in the audit log.
Use cases
Use cases
What your AI agents can do with AbuseTotal
What your AI agents can do with AbuseTotal
AI clients
Mindflow

AbuseTotal
โ Rapidly identify malicious activity across network zones by automating the retrieval of scan data and network zone details, enabling fast prioritization of threats. โ Streamline threat intelligence management by automating creation, updating, and searching of STIX objects within AbuseTotal to maintain current and actionable security insights. โ Automate handling of vortex submissions and observables to augment incident response workflows, reducing manual intervention and accelerating threat investigation.
โ Rapidly identify malicious activity across network zones by automating the retrieval of scan data and network zone details, enabling fast prioritization of threats. โ Streamline threat intelligence management by automating creation, updating, and searching of STIX objects within AbuseTotal to maintain current and actionable security insights. โ Automate handling of vortex submissions and observables to augment incident response workflows, reducing manual intervention and accelerating threat investigation.
Every call goes through one governed endpoint.
Every call goes through one governed endpoint.
Your AI clients get access. You keep control.
Your AI clients get access. You keep control.
Every call to AbuseTotal goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.
Every call to AbuseTotal goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.

AbuseTotal MCP server
Live
RBAC ยท SecOps
Scoped credentials
Audit log

Create stix
Allowed

Create submission
Allowed

Delete scan
Needs approval

Get latest submissions
Blocked
Every call logged ยท Export to SIEM
Questions about the AbuseTotal MCP server
Clear answers before you connect an AI client.
Questions about the AbuseTotal MCP server
Clear answers before you connect an AI client.
Explore more MCP servers in our catalog of 4,000+ services.
Put this MCP server to work.
Bring one AI client and the tools it needs. Weโll show you the setup in Mindflow, from scoped access to the audit log.
Put this MCP server to work.
Bring one AI client and the tools it needs. Weโll show you the setup in Mindflow, from scoped access to the audit log.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research โ straight to your inbox. No spam, unsubscribe anytime.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research โ straight to your inbox. No spam, unsubscribe anytime.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research โ straight to your inbox. No spam, unsubscribe anytime.