Midkernel Threat Intel
Free, read-only public-source threat intel over MCP. No account or API key.
What it does
Midkernel Threat Intel is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.
From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as review pull requests or scan code for vulnerabilities.
Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence). None of this is a test of the tool.
At a glance
How to connect
As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 6h ago (live check)Hosted endpoint
https://www.midkernel.com/security/app/mcp/threat-intelstreamable-http
In Claude Code: claude mcp add --transport http midkernel-threat-intel https://www.midkernel.com/security/app/mcp/threat-intel
MCP settings (Claude Desktop, Cursor and other MCP clients)
{
"mcpServers": {
"midkernel-threat-intel": {
"url": "https://www.midkernel.com/security/app/mcp/threat-intel"
}
}
}Live check
Electra Index connected to the hosted endpoint 6h agoONLINE Midkernel Threat Intel answered an MCP connection on 01 Nov 2026 and introduced itself as midkernel-threat-intel 0.5.0 (MCP protocol 2025-06-18).
6 tools offered to AI assistants
ti_daily_report· Read a bounded daily report of public-source Threat Intel for the previous complete UTC day, selected by source-effective publishedAt, not ingestion time. Free; no user data, repositories, or credits. The day starts at 00:00 UTC inclusive ati_sources· List every configured public Threat Intel source ID, name, format, surface and source URL from the pinned collector registry. Free; no user data, repositories, or credits. No arguments. Use the exact ID in ti_latest.source; guessed aliasesti_classes· List every supported Threat Intel class ID and the taxonomy version. Free; no user data, repositories, or credits. No arguments. Use the exact ID in ti_latest.class; unknown IDs are rejected. The complete bounded catalog is returned in oneti_latest· Read new or changed threats from Midkernel's public-source Threat Intel. Free; no repositories, user data, or credits. Pass since as an ISO timestamp (inclusive); until is an exclusive upper bound, defaults to now, and must be at most 60 dati_trends· Free analytics over Midkernel's own public-source Threat Intel. window.from/to are inclusive UTC source-effective dates, at most 60 days. Compare canonical threat counts with the immediately preceding equal-length window, grouped by class,ti_get· Read one Midkernel Threat Intel record, retained evidence and revisions, plus known-exploited (KEV) evidence joined via CVE. Use a record id from ti_latest, a CVE, or a GHSA id. Free; no user data or credits. KEV absence in the ingested evi
What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method
Is this your server? Monitoring Pro: a check every 30 minutes and an email within the hour when it stops answering. Launch offer: $39.99 once, for life.
Tasks it helps with
Share of each task's required capabilities it covers| Review pull requests Security Scanning | 50% |
| Scan code for vulnerabilities Security Scanning | 50% |
Similar tools
Listed for the same task: review pull requests- diffpilotREMOTELOCALMCP server for PR code review, commit messages, changelogs, and secret detection
- MCP Code Review ServerREMOTELOCALCode review as an MCP server — structured reviews with OWASP security scanning
- StrixREMOTELOCALAI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
- StackurityREMOTELOCALInstalled software, vulnerabilities and end-of-life components across your servers, apps and repos
- DraugrREMOTELOCALSecurity scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk
- chat-recallREMOTELOCALOne searchable history across every AI coding tool, with secret scanning and a shared task board
Ready-made AI agents
- $20/mo · Prices & score →
- $18/mo · free plan · Prices & score →
- $24/mo · free plan · Prices & score →
- Tessl45$100/mo · free plan · Prices & score →
Facts & evidence
Each fact shows where it was seen and when.| Fact | Value | Evidence | Source | Last confirmed |
|---|---|---|---|---|
| Hosted endpoint | https://www.midkernel.com/security/app/mcp/threat-intel | DECLARED | SRC-001 Official MCP Registry | 6h ago |
| Local install (package) | no | DECLARED | SRC-001 Official MCP Registry | 6h ago |
| Remote access (hosted) | yes | DECLARED | SRC-001 Official MCP Registry | 6h ago |
| Website | https://www.midkernel.com/security/docs/mcp | DECLARED | SRC-001 Official MCP Registry | 6h ago |
| Registry status | active | DECLARED | SRC-001 Official MCP Registry | 6h ago |
| Version | 0.5.0 | DECLARED | SRC-001 Official MCP Registry | 6h ago |
| MCP server | yes | DECLARED | SRC-001 Official MCP Registry | 6h ago |
Change history
- NEW01 Nov 2026first seen in the index
Is this page accurate?
Flag it and our robot re-checks the official source. Reports never change a score.Is Midkernel Threat Intel still online?
Free alerts · no account▲ 0Do you run Midkernel Threat Intel? Know when it stops answering
For publishers · optionalIts hosted endpoint can be monitored. Monitoring Pro connects every 30 minutes like an AI assistant, emails you within the hour when it stops answering, keeps a 90-day availability history and adds your answer rate to your badge.
Monitoring never changes a score or a rank.
Are you the publisher of Midkernel Threat Intel?
Free · show your listingAn independent listing builds trust with your buyers. Announce it, and add the badge to your website or README.
<a href="https://electraindex.com/mcp/midkernel-threat-intel?utm_source=badge&utm_medium=share&utm_campaign=listing"><img src="https://electraindex.com/api/badge/midkernel-threat-intel" alt="Listed on Electra Index"></a>Questions about Midkernel Threat Intel
How do I connect Midkernel Threat Intel?
Use the hosted endpoint https://www.midkernel.com/security/app/mcp/threat-intel in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.
What tools does Midkernel Threat Intel offer?
When Electra Index connected on 01 Nov 2026, it listed 6 tools: ti_daily_report, ti_sources, ti_classes, ti_latest, ti_trends, ti_get. The full list is in "Live check" above.
Is Midkernel Threat Intel online?
Yes. Its hosted endpoint answered an MCP connection from Electra Index 6h ago.
What can I use Midkernel Threat Intel for?
Based on its description, it is most relevant to: review pull requests, scan code for vulnerabilities.