PG1 Sovereign Threat Intelligence
STIX 2.1 threat indicator feed: IPs, domains, URLs, file hashes from ThreatFox, OTX, NVD.
Quality & Safety
A
Findings (1)
- LOWin get_threat_indicators
Based on automated analysis of tool definitions and protocol compliance.
Context Cost
~200Tokens (tool definitions)
~1.2 KBTypical response size
Minimal attention impact (0.16% of 128k context)
This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.
One-Click Install
Add this to your `claude_desktop_config.json` file:
{
"mcpServers": {
"pg1-threat-intel": {
"url": "https://pg1-ai-agent.vercel.app/api/mcp"
}
}
}Remote endpoints
https://pg1-ai-agent.vercel.app/api/mcpstreamable-httpTool inventory
Tools (1)
🟢 Read-only🟡 Write🔴 Delete⚪ Unknown
🟢get_threat_indicators(since, type, min_score, limit)
PG1 Sovereign Threat Intelligence: returns a STIX 2.1 bundle of verified threat indicators (IPs, domains, URLs, file hashes) sourced from ThreatFox, URLhaus, AbuseIPDB, OTX and NVD. Payment required: $0.01 via x402 (X-PAYMENT header) or a valid Gumroad license key (X-API-KEY header).
Input Schema
{
"type": "object",
"properties": {
"since": {
"type": "string",
"description": "ISO timestamp; only return indicators last seen after this time."
},
"type": {
"type": "string",
"description": "Filter by indicator_type, e.g. 'IPv4', 'domain', 'URL'."
},
"min_score": {
"type": "string",
"description": "Minimum confidence score (0-100)."
},
"limit": {
"type": "string",
"description": "Max indicators to return (default 500, max 1000)."
}
}
}Recent observations
verifiedversion not recorded1 tools