PG1 Sovereign Threat Intelligence

STIX 2.1 threat indicator feed: IPs, domains, URLs, file hashes from ThreatFox, OTX, NVD.

Quality & Safety

A
Description quality
70%
Schema completeness
90%
Naming quality
100%
Poisoning risk
100%
Permission match
100%
Protocol compliance
100%

Findings (1)

  • LOWTool 'get_threat_indicators' description lacks action verbin get_threat_indicators

Based on automated analysis of tool definitions and protocol compliance.

Context Cost

~200Tokens (tool definitions)
~1.2 KBTypical response size
Minimal attention impact (0.16% of 128k context)

This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.

Rate this Server

One-Click Install

Add this to your `claude_desktop_config.json` file:

{
  "mcpServers": {
    "pg1-threat-intel": {
      "url": "https://pg1-ai-agent.vercel.app/api/mcp"
    }
  }
}

Remote endpoints

https://pg1-ai-agent.vercel.app/api/mcpstreamable-http

Tool inventory

Tools (1)

🟢 Read-only🟡 Write🔴 Delete⚪ Unknown
🟢get_threat_indicators(since, type, min_score, limit)

PG1 Sovereign Threat Intelligence: returns a STIX 2.1 bundle of verified threat indicators (IPs, domains, URLs, file hashes) sourced from ThreatFox, URLhaus, AbuseIPDB, OTX and NVD. Payment required: $0.01 via x402 (X-PAYMENT header) or a valid Gumroad license key (X-API-KEY header).

Input Schema

{
  "type": "object",
  "properties": {
    "since": {
      "type": "string",
      "description": "ISO timestamp; only return indicators last seen after this time."
    },
    "type": {
      "type": "string",
      "description": "Filter by indicator_type, e.g. 'IPv4', 'domain', 'URL'."
    },
    "min_score": {
      "type": "string",
      "description": "Minimum confidence score (0-100)."
    },
    "limit": {
      "type": "string",
      "description": "Max indicators to return (default 500, max 1000)."
    }
  }
}

Recent observations

verifiedversion not recorded1 tools