IsMalicious Threat Intelligence For AI Agents
Reputation of IPs, domains, URLs, hashes, emails and phones; CVE lookups; prompt-injection scans
Power your agent
Add this server
The publisher's own command. Not a PlugMCP endpoint.
Local command
npx -y @ismalicious/[email protected]
Credentials from the publisher
- ISMALICIOUS_API_KEY — API key from https://ismalicious.com/app/account. Optional: without it the server starts in bootstrap mode and offers bootstrap_key.
- ISMALICIOUS_API_SECRET — API secret paired with the key
- ISMALICIOUS_API_BASE — API base URL (defaults to https://ismalicious.com/api; https://api.ismalicious.com reaches the API host directly)
- ISMALICIOUS_TIMEOUT_MS — Replaces every tool's timeout, in milliseconds (defaults: gate 15000, check_indicator 25000, CVE 10000, search_indicators 20000, check_indicators 60000, check_password_exposure 10000). ISMALICIOUS_TIMEOUT_<TOOL>_MS, e.g. ISMALICIOUS_TIMEOUT_CHECK_INDICATOR_MS, sets one tool's timeout and wins over it
- ISMALICIOUS_WEB_BASE — Base URL for bootstrap_key, a route only https://ismalicious.com/api serves (defaults to ISMALICIOUS_API_BASE, or https://ismalicious.com/api when that is api.ismalicious.com)
- ISMALICIOUS_CACHE_TTL_S — Result cache: 0 turns it off; N caps every tool's cache lifetime at N seconds (never raises one)
- ISMALICIOUS_PREWARM — 0 (or false, off, no) skips the one unauthenticated GET /health sent after initialize to open the connection
Provider
Claude Code
ISMALICIOUS_API_KEY=<secret> ISMALICIOUS_API_SECRET=<secret> ISMALICIOUS_API_BASE=<value> ISMALICIOUS_TIMEOUT_MS=<value> ISMALICIOUS_WEB_BASE=<value> ISMALICIOUS_CACHE_TTL_S=<value> ISMALICIOUS_PREWARM=<value> claude mcp add com.ismalicious-mcp-server -- npx -y @ismalicious/[email protected]
Run in a terminal.
Claude Desktop
{
"mcpServers": {
"com.ismalicious-mcp-server": {
"command": "npx",
"args": [
"-y",
"@ismalicious/[email protected]"
],
"env": {
"ISMALICIOUS_API_KEY": "<secret>",
"ISMALICIOUS_API_SECRET": "<secret>",
"ISMALICIOUS_API_BASE": "<value>",
"ISMALICIOUS_TIMEOUT_MS": "<value>",
"ISMALICIOUS_WEB_BASE": "<value>",
"ISMALICIOUS_CACHE_TTL_S": "<value>",
"ISMALICIOUS_PREWARM": "<value>"
}
}
}
}claude_desktop_config.json
Remote URL or a command on your machine? How the two installs differ
Run on PlugMCP
Host a copy with our keys and logs.
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
LaunchRelated MCP
View more- Firecrawl🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM clients.
- NNotionToken-auth Notion MCP: pages, databases, blocks, comments, files. Runs headless in CI and agents.
- Context7Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
Related skills
View all- reaReverse engineer anything with agents, from app behavior down to native binaries.
- rea-changelog-updatePrepare or rewrite REA release changelogs and GitHub release notes from pinned Git history, with verified contributor thanks and Release Please synchronization.
- rea-tool-designDesign or change REA investigation tools, CLI/MCP contracts, provider capabilities, and Evidence semantics.
Reputation of IPs, domains, URLs, hashes, emails and phones; CVE lookups; prompt-injection scans
README is not crawled yet. Open the repository
- How do I install IsMalicious Threat Intelligence For AI Agents?
- Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.
- Does IsMalicious Threat Intelligence For AI Agents need an API key?
- The publisher lists these environment variables: ISMALICIOUS_API_KEY, ISMALICIOUS_API_SECRET, ISMALICIOUS_API_BASE, ISMALICIOUS_TIMEOUT_MS, ISMALICIOUS_WEB_BASE, ISMALICIOUS_CACHE_TTL_S, ISMALICIOUS_PREWARM.
- What transport does IsMalicious Threat Intelligence For AI Agents use?
- IsMalicious Threat Intelligence For AI Agents runs locally over stdio.
- When was IsMalicious Threat Intelligence For AI Agents last checked?
- Last checked 2026-10-16. Reputation of IPs, domains, URLs, hashes, emails and phones; CVE lookups; prompt-injection scans
No tool list yet. Remote servers get one after the first health check.