fr0gger/MCP_Security
Free用于查询 ORKL API 的 MCP 服务器。提供获取威胁报告、分析威胁行为者和检索情报来源的工具。
FreeFree tier
About fr0gger/MCP_Security
ORKL MCP Server is a Model Context Protocol (MCP) server that enables querying the ORKL API for threat intelligence. It provides tools to fetch latest threat reports, retrieve detailed report information, list and analyze threat actors, and access threat intelligence sources. Designed to integrate seamlessly with MCP-compatible applications like Claude, this open-source tool facilitates building AI-driven security workflows and automated threat analysis.
Key Features
Fetch latest threat reports with titles and IDs
Retrieve detailed threat report details by report ID
Fetch list of known threat actors with IDs and names
Retrieve detailed threat actor information by actor ID
Fetch list of threat intelligence sources
Retrieve source metadata by source ID
Integrates with MCP-compatible applications (e.g., Claude Desktop)
Written in Python, easy to extend
Pros & Cons
Pros
- Open-source and free to use
- Provides structured access to the ORKL threat intelligence API
- Easy integration with MCP-compatible clients like Claude
- Covers reports, actors, and sources with dedicated tools
- Lightweight and quick to set up
Cons
- Limited to ORKL API data only, not a general threat intelligence tool
- Requires an MCP-compatible client to use
- No built-in graphical interface; command-line based configuration
- Documentation limited to README and linked blog post
Best For
Threat intelligence gathering and analysisSecurity research and incident responseBuilding AI-powered security assistantsTracking threat actor activities and campaignsAutomating enrichment of security reports
FAQ
How do I configure the ORKL MCP Server with Claude Desktop?
Edit or create the file claude_desktop_config.json (located at /Users/user/Library/Application Support/Claude/) and add an entry for the ORKL MCP server with the command 'uv run orkl' and the directory path to the project.
Is the ORKL MCP Server free to use?
Yes, it is an open-source project available on GitHub under the fr0gger/MCP_Security repository.
What tools does the ORKL MCP Server provide?
It provides six tools: fetch_latest_threat_reports, fetch_threat_report_details, fetch_threat_actors, fetch_threat_actor_details, fetch_sources, and fetch_source_details.