Nullcone Threat Intelligence

Name: Nullcone Threat Intelligence
Author: maco144

MCP serverMCP

Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats

by maco144repository ↗homepage ↗v0.1.0

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"nullcone-threat-intelligence","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability4/4 checks ok

30 days agotoday

Endpoints

https://nullcone.ai/mcpmcp streamable http · checked on a schedule

Registry facts

Not distributed through a package registry we index.

when	check	result	http	latency	detail
6 h ago	mcp initialize	ok	200	90 ms	server Nullcone Threat Intelligence 1.29.0 · protocol 2025-06-18 · 30 tools
13 h ago	mcp initialize	ok	200	90 ms	server Nullcone Threat Intelligence 1.29.0 · protocol 2025-06-18 · 30 tools
20 h ago	mcp initialize	ok	200	114 ms	server Nullcone Threat Intelligence 1.29.0 · protocol 2025-06-18 · 30 tools
27 h ago	mcp initialize	ok	200	95 ms	server Nullcone Threat Intelligence 1.29.0 · protocol 2025-06-18 · 30 tools
34 h ago	mcp initialize	ok	200	86 ms	server Nullcone Threat Intelligence 1.29.0 · protocol 2025-06-18 · 30 tools

Tools observed via MCP handshake

submit_ioc — Submit a threat indicator (IOC) to the shared intelligence network. The IOC is automatically classified into a malware family, metadata is compres
submit_batch — Submit multiple IOCs in a single call. Preferred over looping submit_ioc for bulk ingest from honeypots, sandboxes, or feed processing. Each dict
lookup_ioc — Look up a threat signature by its exact IOC value. Returns the full signature record if found, including severity, family, detection count, and fa
recent_threats — Return the most recently observed threat signatures. Args: limit: Max number of results to return (1-200) min_severity: Minimum
family_threats — Return all threat signatures associated with a known malware family. Use list_families() first to discover available family names. Args:
list_families — Return all known malware families in the intelligence database. Each entry includes the family name, description, and category. Use family_threats
search_by_type — Return threat signatures filtered by IOC type. Useful for pulling all known-bad IPs, all malicious domains, all malicious AI skill hashes, etc.
report_detection — Report that you detected and acted on a known threat signature. Increments the signature's detection count and creates a ThreatEvent visible to al
vote_false_positive — Flag a threat signature as a likely false positive. When more than 20% of agents vote false positive on a signature, its `is_likely_fp` flag becom
poll_since — Fetch new threat signatures since a high-water mark ID. This is the recommended sync pattern — one call, get new data, persist next_id, disconnect.
get_stats — Return aggregate statistics for the threat intelligence database. Includes total signatures, known malware families, active agents, and total dete
validate_skill — Synchronous SKILL IOC lookup — call this before loading or invoking any MCP tool/skill to check it against the Nullcone threat feed. This is the p
scan_skill_content — Pre-execution content scan for skill/instruction files. Analyzes the full text of a skill (markdown, plain text, SKILL.md, etc.) for malicious pat
get_new_threats — Drain the live push-subscription buffer of threats received since the last call. Zero-polling — threats are delivered via SpacetimeDB WebSocket sub
warm_prompt_cache — Load all PROMPT IOCs from SpacetimeDB into the in-memory hash set. Call once at startup (or after a major feed update) to populate the sub-1ms que
check_prompt — Check a prompt or text fragment for known PROMPT IOC patterns. Uses an in-memory hash set for sub-1ms token-level querying — no network calls afte
check_prompt_batch — Check multiple prompts for PROMPT IOC patterns in a single call. More efficient than calling check_prompt() in a loop — tokenization overhead is a
prompt_cache_stats — Return PROMPT IOC cache statistics: size, hit rate, latency, refresh status. Use this to verify the cache is warmed and healthy before relying on
check_freshness — Validate that IOC threat intelligence is fresh enough for the named action. Call this before any high-risk agent action to ensure the TI snapshot
freshness_limits — Return the configured IOC freshness limits for all action tiers. Shows max staleness, warn threshold, and which actions belong to each tier. Use t
fingerprint_tool_metadata — Analyze an MCP tool definition for instruction-injection and malicious patterns. Performs semantic fingerprinting of the tool's description, parameter
registry_monitor_stats — Return MCP registry monitoring statistics. Shows how many tool definitions are tracked, how many have been flagged, and the current drift detectio
registry_flagged_tools — Return all MCP tools that have been flagged as suspicious or malicious. Includes tools flagged on initial ingestion (high-risk fingerprint) and to
subscribe_threats — Open a named, stateful subscription to live threat push delivery. Returns a subscription_id. Pass it to drain_subscription() to collect the IOCs t
drain_subscription — Drain the buffer of a stateful subscription created by subscribe_threats(). Returns all IOCs delivered to this subscription since the last drain.
unsubscribe — Cancel a stateful subscription and free its buffer. Call this when you no longer need the subscription to release memory. Subscriptions also auto-
list_subscriptions — List all active stateful push subscriptions on this MCP server instance. Returns metadata for each subscription (not the buffered IOCs themselves).
revoke_ioc — Revoke an IOC by its value hash, pushing the expiration event to all active subscriptions in real-time. Call this when an IOC is determined to be
is_ioc_revoked — Check whether an IOC has been revoked. O(1) in-process lookup. Use this before acting on any cached threat intelligence to ensure the IOC has not
list_revocations — List recent IOC revocations, newest first. Args: limit: Maximum number of revocations to return (default 50). since_hours: Only

Declared by sources

What the publisher says

Attributed to the source that supplied each field. Treated as claims, not facts.

No long description beyond the summary.

kind ← Official MCP Registry

name ← Official MCP Registry

repoUrl ← Official MCP Registry

summary ← Official MCP Registry

version ← Official MCP Registry

description ← Official MCP Registry

homepageUrl ← Official MCP Registry

publisherName ← Official MCP Registry

Derived by Wellknown

Capabilities

Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.

ai.promptingPrompt Management100%dev.monitoringMonitoring & Observability55%data.databaseDatabases53%code.executionCode Execution51%

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registryio.github.maco144/nullcone

first seen 2 d ago · fetched 2 d agoopen ↗

Field history (7 recent events)

2 d ago · declared · summary → "Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats"
2 d ago · declared · description → "Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats"
2 d ago · declared · publisherName → "maco144"
2 d ago · declared · homepageUrl → "https://nullcone.ai"
2 d ago · declared · repoUrl → "https://github.com/maco144/nullcone-mcp"
2 d ago · declared · version → "0.1.0"
2 d ago · declared · protocols → ["mcp"]