PG1 Sovereign Threat Intelligence

Name: PG1 Sovereign Threat Intelligence
Author: Project-Gifted1

MCP serverMCP

Threat intel for AI agents: IOCs, CVEs (EPSS/KEV), wallet sanctions and age, domain and URL checks.

by Project-Gifted1repository ↗v1.16.0

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"pg1-sovereign-threat-intelligence","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability69/69 checks ok

when	check	result	http	latency	detail
5 h ago	mcp initialize	ok	200	47 ms	server pg1-threat-intel 1.17.0 · protocol 2025-06-18 · 16 tools
10 h ago	mcp initialize	ok	200	48 ms	server pg1-threat-intel 1.17.0 · protocol 2025-06-18 · 16 tools
18 h ago	mcp initialize	ok	200	79 ms	server pg1-threat-intel 1.17.0 · protocol 2025-06-18 · 16 tools
25 h ago	mcp initialize	ok	200	77 ms	server pg1-threat-intel 1.17.0 · protocol 2025-06-18 · 16 tools
32 h ago	mcp initialize	ok	200	46 ms	server pg1-threat-intel 1.17.0 · protocol 2025-06-18 · 16 tools
2 d ago	mcp initialize	ok	200	112 ms	server pg1-threat-intel 1.16.0 · protocol 2025-06-18 · 15 tools
2 d ago	mcp initialize	ok	200	74 ms	server pg1-threat-intel 1.16.0 · protocol 2025-06-18 · 15 tools
2 d ago	mcp initialize	ok	200	177 ms	server pg1-threat-intel 1.16.0 · protocol 2025-06-18 · 15 tools
2 d ago	mcp initialize	ok	200	87 ms	server pg1-threat-intel 1.16.0 · protocol 2025-06-18 · 15 tools
3 d ago	mcp initialize	ok	200	136 ms	server pg1-threat-intel 1.15.0 · protocol 2025-06-18 · 14 tools

Tools observed via MCP handshake

get_threat_indicators — PG1 Sovereign Threat Intelligence: returns a STIX 2.1 bundle of verified threat indicators (IPs, domains, URLs, file hashes) sourced from OTX and NVD. Payment r
get_cve_details — PG1 Sovereign Threat Intelligence: enriched CVE lookup combining NVD (description, CVSS score/vector), FIRST.org EPSS (exploit-probability score and percentile)
get_ioc_context — PG1 Sovereign Threat Intelligence: looks up a single specific indicator value (IP, domain, URL, or hash) — the recommended pre-action safety check for AI agents
get_cve_batch — PG1 Sovereign Threat Intelligence: looks up multiple CVE identifiers in a single call, each enriched with NVD description/CVSS, FIRST.org EPSS score, and CISA K
get_ioc_batch — PG1 Sovereign Threat Intelligence: looks up multiple indicators (IPs, domains, URLs, hashes) in a single call — a batched pre-action safety check for AI agents.
get_threat_actor_profile — PG1 Sovereign Threat Intelligence: returns a dossier for a known threat actor / APT group — aliases, description, associated MITRE ATT&CK techniques, and associ
get_cve_by_product — PG1 Sovereign Threat Intelligence: returns CVEs affecting a given vendor/product (optionally a specific version), enriched with CVSS, EPSS, and CISA KEV status,
get_usage_status — PG1 Sovereign Threat Intelligence: returns your remaining free-tier calls for today and current Gumroad license status. No payment required — this tool is alway
subscribe_alerts — PG1 Sovereign Threat Intelligence: registers a standing filter (indicator type, min EPSS, or KEV-only). Matching new indicators are POSTed to the given webhook
submit_indicator — PG1 Sovereign Threat Intelligence: submit an observed indicator for validation and possible inclusion in future query results. Requires a valid Gumroad license
check_wallet_sanctions — PG1 Sovereign Threat Intelligence: checks a cryptocurrency wallet address against the OFAC SDN (Specially Designated Nationals) sanctions list, synced daily fro
check_domain_age — PG1 Sovereign Threat Intelligence: looks up a domain's registration age via RDAP (the IANA-standardized WHOIS successor), resolved through the IANA bootstrap re
check_hostname_reputation — PG1 Sovereign Threat Intelligence: checks a single hostname against the MetaMask eth-phishing-detect blocklist/allowlist and a lookalike/typosquat detector, syn
check_wallet_age — PG1 Sovereign Threat Intelligence: reports when an EVM wallet address first appeared on a given chain, based on its earliest on-chain transfer history (in or ou
check_ip_abuse — PG1 Sovereign Threat Intelligence: looks up one public IPv4 or IPv6 address in AbuseIPDB using YOUR OWN AbuseIPDB API key (free or paid), and returns its abuse
check_package — PG1 Sovereign Threat Intelligence: a pre-install check for one npm or PyPI package - check before you install. No payment required - this tool is always free, a

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registryio.github.Project-Gifted1/pg1-threat-intel

first seen 19 d ago · fetched 3 h agoopen ↗

Field history (12 recent events)

3 h ago · declared · version → "1.16.0"
3 d ago · declared · version → "1.15.0"
9 d ago · declared · description → "Threat intel for AI agents: IOCs, CVEs (EPSS/KEV), wallet sanctions and age, domain and URL checks."
9 d ago · declared · summary → "Threat intel for AI agents: IOCs, CVEs (EPSS/KEV), wallet sanctions and age, domain and URL checks."
9 d ago · declared · version → "1.14.0"
11 d ago · declared · version → "1.12.0"
14 d ago · declared · summary → "STIX IOCs, CVE lookups w/ EPSS/KEV, ATT&CK dossiers, OFAC wallet sanctions, domain age checks."
14 d ago · declared · description → "STIX IOCs, CVE lookups w/ EPSS/KEV, ATT&CK dossiers, OFAC wallet sanctions, domain age checks."
14 d ago · declared · version → "1.11.0"
17 d ago · declared · summary → "STIX indicators, CVE lookups/search w/ EPSS/CISA KEV, ATT&CK dossiers, alerts & subs."
17 d ago · declared · description → "STIX indicators, CVE lookups/search w/ EPSS/CISA KEV, ATT&CK dossiers, alerts & subs."
17 d ago · declared · version → "1.7.1"

PG1 Sovereign Threat Intelligence

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from