com.midkernel/threat-intel · v0.5.0 · security
Midkernel Threat Intel is healthy: it completed an MCP handshake in 3235 ms and exposes 6 tools.
Free, read-only public-source threat intel over MCP. No account or API key.
Endpoint: https://www.midkernel.com/security/app/mcp/threat-intel (streamable-http)
No repository listed · Website · JSON · Add to my inventory
| Users (last 30 days) | 0 |
| Handshake | Healthy |
| Auth needed | None |
| Tool count | 6 |
| Latency | 3235 ms |
| Last checked (UTC) | 2026-11-01T13:40:27.933Z |
| Checked (UTC) | Status | Latency | Error |
|---|---|---|---|
| 2026-11-01T13:40:27.933Z | Healthy | 3235 |
ti_daily_report | Read a bounded daily report of public-source Threat Intel for the previous complete UTC day, selected by source-effective publishedAt, not ingestion time. Free; no user data, repositories, or credits. The day starts at 00:00 UTC inclusive and ends at the next 00:00 UTC exclusive; callers cannot over |
ti_sources | List every configured public Threat Intel source ID, name, format, surface and source URL from the pinned collector registry. Free; no user data, repositories, or credits. No arguments. Use the exact ID in ti_latest.source; guessed aliases are rejected. The complete bounded catalog is returned in on |
ti_classes | List every supported Threat Intel class ID and the taxonomy version. Free; no user data, repositories, or credits. No arguments. Use the exact ID in ti_latest.class; unknown IDs are rejected. The complete bounded catalog is returned in one response. Classes can overlap; unknown means no supported as |
ti_latest | Read new or changed threats from Midkernel's public-source Threat Intel. Free; no repositories, user data, or credits. Pass since as an ISO timestamp (inclusive); until is an exclusive upper bound, defaults to now, and must be at most 60 days later. timeField=changedAt includes new evidence and sema |
ti_trends | Free analytics over Midkernel's own public-source Threat Intel. window.from/to are inclusive UTC source-effective dates, at most 60 days. Compare canonical threat counts with the immediately preceding equal-length window, grouped by class, source, or day. These measure collected evidence, not attack |
ti_get | Read one Midkernel Threat Intel record, retained evidence and revisions, plus known-exploited (KEV) evidence joined via CVE. Use a record id from ti_latest, a CVE, or a GHSA id. Free; no user data or credits. KEV absence in the ingested evidence is not proof a vulnerability is unexploited. Retained |