About Oracle 42 Darkintel Mcp
Oracle 42 Darkintel Mcp is a darknet threat intelligence MCP server for security teams. Its tools query vectorized data from the IronClaw pipeline for actor profiles, malware patterns, breach intelligence, and defense procedures.
Key features
- 01Darknet threat intelligence queries
- 02Threat actor profile lookup
- 03Worm and mining signature detection
- 04Traffic hijacking and code attack intel
- 05Breach and marketplace intelligence
- 06Defense procedures and social engineering patterns
Use cases
- 01Investigate darknet threats and SOC alerts
- 02Look up actors and ransomware groups
- 03Detect worms, stealth mining, and traffic hijacking
- 04Check breach intelligence and plan responses
MCP support
The server exposes 10 threat-intelligence tools to MCP clients for queries, detection, and defense procedures. It supports remote SSE connections and local stdio operation.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
We haven’t collected a package or remote endpoint for this server. Follow the instructions in the project README.
Tools
Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.
Details
From the project READMEOracle-42 DarkIntel MCP Server
Darknet threat intelligence MCP server powered by 12,000+ vectorized data points from IronClaw intelligence pipeline.
Tools (10)
| Tool | Description | Data Points |
|---|---|---|
threat_intel | Darknet threat intelligence | SOC alerts, forensic reports |
actor_lookup | Threat actor profiles | 2,800+ actors, ransomware groups |
worm_scan | AI worm signatures | 1,900+ self-replicating patterns |
mining_detect | Stealth cryptomining detection | 2,000+ mining signatures |
traffic_scan | Traffic hijacking intel | 2,100+ BGP/DNS/CDN patterns |
code_vuln | Code supply chain attacks | 1,400+ IDE/npm/CI patterns |
breach_check | Breach & leak intelligence | Data breaches, leaked credentials |
market_intel | Darknet marketplace intel | 600+ indexed markets |
defense_playbook | Defense playbooks | 243 pre-built response procedures |
social_engineering | Social engineering techniques | 60+ advanced SE patterns |
Usage
Claude Desktop / Cursor
{
"mcpServers": {
"oracle42-darkintel": {
"url": "http://173.249.14.219:8420/sse"
}
}
}
stdio (local)
pip install mcp
python server.py
SSE (remote)
python server.py sse
Requirements
- Python 3.10+
mcpSDK (pip install mcp)- Qdrant vector database (localhost:6333)
- Ollama with
nomic-embed-textmodel (localhost:11434)
License
Proprietary - Oracle-42 Project
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.