scan-cyber-threats

Use this skill when the user asks about live cyber-threat activity: malware indicators of compromise (URLhaus, Feodotracker), active command-and-control infrastructure, or CISA known-exploited vulnerabilities.

Authentication

Server-to-server callers (agents, scripts, SDKs) MUST present an API key in the X-WorldMonitor-Key header. Authorization: Bearer … is for MCP/OAuth or Clerk JWTs — not raw API keys.

X-WorldMonitor-Key: wm_0123456789abcdef0123456789abcdef01234567

Issue a key at https://www.worldmonitor.app/pro.

Endpoint

GET https://api.worldmonitor.app/api/cyber/v1/list-cyber-threats