BlackDome Threat Intel

Overview

BlackDome Threat Intel is a Model Context Protocol server that surfaces live honeypot threat intelligence directly into your AI assistant. It exposes attacker IPs, indicators of compromise, credentials, payloads, and threat actor information as tools your model can invoke in real time, giving you actionable threat data where you work.

The server runs locally on your machine. Install it with uvx blackdome-mcp, which runs the Python package blackdome-mcp over MCP's stdio protocol. You'll need an API key to authenticate. The latest release is v0.2.0, published under the MIT license with source code available at blackdome-ai/blackdome-mcp on GitHub.

BlackDome Threat Intel appears in the Security category on mcp.site and works with Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed, and other MCP clients. If you maintain this server for blackdome-ai, claim this listing to verify ownership and keep information up to date.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "blackdome_threat_intel": {
      "command": "uvx",
      "args": [
        "blackdome-mcp"
      ]
    }
  }
}