Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats
Use this profile to copy client config, check auth requirements, review tools and resources, and compare related MCP servers before adding it to an AI client.
Get practical integration notes and launch examples for MCP servers like Nullcone Threat Intelligence.
https://nullcone.ai/mcpAdd this server entry to the mcpServers object in your Claude Desktop config, then restart the app.
{
"mcpServers": {
"io-github-maco144-nullcone": {
"url": "https://nullcone.ai/mcp"
}
}
}~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.jsonNo remote HTTP endpoint is advertised. Use the package or stdio setup shown in Install.
Nullcone Threat Intelligence is an MCP server for Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats. It supports HTTP transport.
Use the generated config in Install. It points your client at the advertised remote endpoint shown on this page.
Choose the Claude Desktop tab in Install, copy the config, and add it to Claude Desktop's MCP server settings. Endpoint: https://nullcone.ai/mcp.
Choose the Claude Code tab in Install, copy the config, and add it to Claude Code's MCP server settings. Endpoint: https://nullcone.ai/mcp.
Choose the Codex tab in Install, copy the config, and add it to Codex's MCP server settings. Endpoint: https://nullcone.ai/mcp.
Choose the Cursor or VS Code tab in Install, copy the config, and add it to Cursor or VS Code's MCP server settings. Endpoint: https://nullcone.ai/mcp.
Nullcone Threat Intelligence uses HTTP transport. Endpoint: https://nullcone.ai/mcp.
Nullcone Threat Intelligence inventory is listed when the MCP endpoint exposes tools, resources, or prompts. Some servers require auth first.
Nullcone Threat Intelligence does not advertise a verified auth requirement. If discovery fails, it may still need provider login, an API key, a bearer token, or a session header.