IsMalicious threat intelligence for AI agents MCP Server

IsMalicious threat intelligence for AI agents is an MCP integration. Reputation of IPs, domains, URLs, hashes, emails and phones; CVE lookups; prompt-injection scans.

Packages and local setup

The published npm package is @ismalicious/mcp-server, version 0.5.0. Its declared MCP transport is stdio.

The package declares ISMALICIOUS_API_KEY: API key from https://ismalicious.com/app/account. Optional: without it the server starts in bootstrap mode and offers bootstrap_key.; ISMALICIOUS_API_SECRET: API secret paired with the key; ISMALICIOUS_API_BASE: API base URL (defaults to https://ismalicious.com/api; https://api.ismalicious.com reaches the API host directly); ISMALICIOUS_TIMEOUT_MS: Replaces every tool's timeout, in milliseconds (defaults: gate 15000, check_indicator 25000, CVE 10000, search_indicators 20000, check_indicators 60000, check_password_exposure 10000). ISMALICIOUS_TIMEOUT_ _MS, e.g. ISMALICIOUS_TIMEOUT_CHECK_INDICATOR_MS, sets one tool's timeout and wins over it; ISMALICIOUS_WEB_BASE: Base URL for bootstrap_key, a route only https://ismalicious.com/api serves (defaults to ISMALICIOUS_API_BASE, or https://ismalicious.com/api when that is api.ismalicious.com); ISMALICIOUS_CACHE_TTL_S: Result cache: 0 turns it off; N caps every tool's cache lifetime at N seconds (never raises one); ISMALICIOUS_PREWARM: 0 (or false, off, no) skips the one unauthenticated GET /health sent after initialize to open the connection.

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository · Project website. This profile uses version 0.5.0 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related communication MCP servers for tools that cover the same kind of work.