darknet-mcp-server-threat-intelligence
Installation
SKILL.md
darknet-mcp-server Threat Intelligence
Skill by ara.so — MCP Skills collection.
Overview
darknet-mcp-server is a comprehensive MCP server providing 66 tools across 16 data sources for dark web and threat intelligence. It unifies breach databases (HIBP), ransomware tracking, Tor .onion access, malware analysis (Hybrid Analysis, MalwareBazaar), blockchain forensics, exploit databases (Vulners), stealer logs (Hudson Rock), and OSINT platforms into a single interface for AI agents.
Key capabilities:
- Breach intelligence: HIBP, IntelligenceX, paste searches
- Ransomware tracking: ransomware.live, ransomlook.io (12 active groups, 1000+ victims)
- Dark web access: 7 Tor tools for .onion fetching, scraping, searching
- Malware analysis: ThreatFox, MalwareBazaar, Hybrid Analysis, URLhaus
- Blockchain: Bitcoin transaction tracing, ChainAbuse reports
- IP/domain intel: AbuseIPDB, GreyNoise, AlienVault OTX, Pulsedive
- Exploit search: Vulners database
- Phishing: PhishTank, OpenPhish