threatfox
No liveness check has reached it yet; it has been in the index since 10 Oct 2026. How this is checked
ThreatFox MCP Server exposes ThreatFox threat-intelligence data through a JSON-RPC MCP endpoint. Its tools search indicators of compromise, retrieve recent IOCs, and investigate malware hashes for security analysts and automated detection workflows.
Inferred · not functionally tested
Overview
6 featuresPurpose: Finding and ingesting threat intelligence about indicators of compromise, malware hashes, and command-and-control infrastructure.
Inferred · not functionally tested
Audience: security analysts and threat-intelligence developers
Inferred · not functionally tested
Functions: data_extraction
Inferred · not functionally tested
Interfaces: API: indicated (inferred, not tested) · MCP: indicated (inferred, not tested) · CLI: unknown · Self-hosting: unknown
Recorded constraints: pricing: unknown · license: Proprietary · platforms: WEB · deployment: browser, api_only, cloud_managed
Constraint provenance is unknown; confirm requirements with the publisher.
Record sources: gateway.pipeworx.io. These links do not verify the individual claims.
threatfox sits in PulseGate's Threat intelligence, SIEM & detection category. Inferred · not functionally tested: It focuses on finding and ingesting threat intelligence about indicators of compromise, malware hashes, and command-and-control infrastructure. Inferred · not functionally tested: It is built as a B2B product for security analysts and threat-intelligence developers. Basis unknown · not verified: threatfox is available on the web and API.
It is developed by Pipeworx. Inferred · not functionally tested: Among its 6 catalogued features are IOC Search, Recent IOCs, and Hash Search. Inferred · not functionally tested: Catalogued interfaces include an MCP server and a public API.
Summary written by a language model from the project’s public pages.
Tasks: Inferred · not functionally tested
- IOC Search
- Recent IOCs
- Hash Search
- Malware Context
- C2 Tracking
- JSON-RPC Endpoint
Topics: Inferred · not functionally tested
Built with & integrations
- Cloudflare
- cf-ray header
Trust & compliance
Indexing history
1What PulseGate has recorded for this listing
- Indexed10 Oct · 03:02 UTCThreatfox seen via MCP Registry (official)Source: MCP Registry (official) · Open
Frequently asked questions about threatfox
- What does threatfox do?
- Inferred · not functionally tested: Threatfox focuses on finding and ingesting threat intelligence about indicators of compromise, malware hashes, and command-and-control infrastructure. It is catalogued under Threat intelligence, SIEM & detection on PulseGate.
- Who is threatfox for?
- Inferred · not functionally tested: threatfox is a B2B product built for security analysts and threat-intelligence developers.
- What platforms does threatfox run on?
- Basis unknown · not verified: threatfox runs on the web and API.
- Is threatfox still active?
- Unverified. threatfox has not been re-checked since it entered the index, so there is no finding either way — and only a positive finding would say otherwise.
- What projects are similar to threatfox?
- Similar projects tracked by PulseGate include threatray-mcp, openfoodtox, and feodotracker.threatray-mcpopenfoodtoxfeodotracker
- Who develops threatfox?
- threatfox is developed by Pipeworx.
- Does threatfox have an API or integrations?
- Inferred · not functionally tested: Yes — threatfox exposes an MCP server and a public API.
Similar projects
Closest matches by what these projects do