Rösti Threat Intel

Overview

Rösti Threat Intel is a Model Context Protocol server that lets you look up indicators of compromise and search threat intelligence reports, YARA rules, MITRE ATT&CK identifiers, and CVEs directly from rosti.dev. It brings threat research capabilities into your AI assistant as callable tools, letting Claude, Cursor, and other compatible clients query security data on your behalf.

The server runs as a remote endpoint at https://mcp.rosti.dev/mcp, requiring only an API key for authentication. There is nothing to install locally. The latest release is v0.2.1. You can find more information at the vendor website https://rosti.dev/mcp.

Rösti Threat Intel sits in the Security category on mcp.site and works with MCP clients including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Zed. If you maintain this server for rosti.dev, claim your listing to verify ownership and keep the information up to date.

Installation

Settings → Connectors → Add custom connector
Name: Rösti Threat Intel
URL:  https://mcp.rosti.dev/mcp