Back to Browse
Free
Server data from the Official MCP Registry
IOCs (URLs, domains, IPs, hashes) shared by the infosec community on X/Twitter. No auth, CC0.
About
IOCs (URLs, domains, IPs, hashes) shared by the infosec community on X/Twitter. No auth, CC0.
Remote endpoints: streamable-http: https://mcp.tweetfeed.live/
Security Report
10.0
Low Risk10.0Low RiskValid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Imported from the Official MCP Registry.
9 tools verified · Open access · No issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Connect
Remote Plugin
No local installation needed. Your AI client connects to the remote endpoint directly.
Add this to your MCP configuration to connect:
{
"mcpServers": {
"io-github-0xdaniellopez-tweetfeed": {
"url": "https://mcp.tweetfeed.live/"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
tweetfeed-mcp
Model Context Protocol (MCP) server for tweetfeed.live.
Exposes the public IOC feed (URLs, domains, IPs, SHA256/MD5 hashes shared by the infosec community on Twitter/X) as MCP tools so AI agents can query threat intel programmatically.
- Endpoint:
https://mcp.tweetfeed.live/(HTTP JSON-RPC 2.0, POST) - Protocol version: 2025-11-25 (negotiated; older clients fall back automatically)
- Auth: none (all IOC data is CC0)
- License (data): CC0-1.0 · License (code): MIT
Tools
| Name | Purpose |
|---|---|
query_iocs | Query IOCs by time window (today/week/month) with optional user, tag, and type filters. |
check_url | Check whether a specific URL appears in the feed. |
check_ip | Check whether an IPv4/IPv6 address appears in the feed. |
check_hash | Check whether an MD5 or SHA-256 hash appears in the feed (type auto-detected). |
list_recent_iocs | List IOCs added since a given date, with optional type/tag filters. |
get_tag_info | Window aggregates plus recent IOCs for a tag (leading # optional). |
get_trending | Top tags and IOC-type distribution for a window (today/week/month/year). |
enrich_ioc | Auto-detect an IOC's type (url/domain/ip/md5/sha256) and look it up over the past 30 days. |
get_campaigns | AI-clustered campaign groupings from the last 7 days, with optional brand and min-confidence filters. |
Use with Claude Desktop / Claude.ai / other MCP clients
{
"mcpServers": {
"tweetfeed": {
"url": "https://mcp.tweetfeed.live/"
}
}
}
Or from the Claude Code CLI:
claude mcp add tweetfeed https://mcp.tweetfeed.live/
Quick test
curl -sX POST https://mcp.tweetfeed.live/ \
-H 'content-type: application/json' \
-d '{"jsonrpc":"2.0","method":"tools/list","id":1}' | jq .
# Example tool call:
curl -sX POST https://mcp.tweetfeed.live/ \
-H 'content-type: application/json' \
-d '{"jsonrpc":"2.0","method":"tools/call","id":2,
"params":{"name":"query_iocs",
"arguments":{"time":"today","tag":"phishing","type":"url","limit":5}}}' | jq .
Develop
npm install
npm run dev # wrangler dev on http://localhost:8787
MCP_URL=http://localhost:8787 npm test
Deploy
npm run deploy # wrangler deploy (routes mcp.tweetfeed.live/*)
MCP_URL=https://mcp.tweetfeed.live npm test
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
80.0K
Stars
7
Installs
6.5
Security
No ratings yet
Local
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
137
Stars
547
Installs
8.0
Security
4.8
Local
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
-
Stars
84
Installs
10.0
Security
4.6
Local