An official MCP server exposing HoneyLabs' honeypot threat intelligence data. It allows AI agents to query attacker fingerprints, targeted ports, CVE matches, and ASN profiles using tools like ioc_lookup, top_attackers, and search_events to support SOC enrichment and threat hunting.
- Operator: HoneyLabs
- Endpoint: https://mcp.honeylabs.net/mcp
- Transport: streamable-http
- Sign-in: No sign-in
- Category: AI and machine learning
- Use cases: Enrich security alerts with IP reputation and attacker context; Track threat campaigns by analyzing attack timelines and ASN data; Search for specific CVE probes or malicious fingerprints in honeypot logs
- Tools: search_events_tool, top_attackers_tool, ioc_lookup_tool, cve_lookup_tool, payload_search_tool, attack_timeline_tool, asn_enrich_tool, fingerprint_search_tool, fingerprint_similar_tool, fingerprint_population_tool, udp_activity_tool
- Documentation: https://honeylabs.net/docs
- Directory listing: https://koskamo.com/explore/honeylabs-mcp
- Also known as: HoneyLabs MCP MCP; honeylabs-mcp