mcp-greynoise
An MCP server that integrates the GreyNoise API to analyze IP addresses. It determines if an IP is generating internet background noise, is a known benign service (RIOT), or is potentially targeted. It supports checking single or multiple IPs and provides classification details for security threat intelligence.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Check if an IP is internet background noise or a targeted attack
- Identify known benign services like Google or Cloudflare
- Analyze multiple IPs in a single call for threat assessment
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
mcp-greynoise 0.1.0
{
"version": "0.1.0",
"transport": "stdio",
"identifier": "mcp-greynoise",
"registryType": "npm",
"environmentVariables": [
{
"name": "GREYNOISE_API_KEY",
"format": "string",
"isRequired": true,
"description": "GreyNoise API key (free Community tier: 50 req/day)"
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"mcp-greynoise": {
"command": "npx",
"args": [
"-y",
"mcp-greynoise@0.1.0"
],
"env": {
"GREYNOISE_API_KEY": "<YOUR_GREYNOISE_API_KEY>"
}
}
}
}Cline
{
"mcpServers": {
"mcp-greynoise": {
"command": "npx",
"args": [
"-y",
"mcp-greynoise@0.1.0"
],
"env": {
"GREYNOISE_API_KEY": "<YOUR_GREYNOISE_API_KEY>"
}
}
}
}VS Code
{
"servers": {
"mcp-greynoise": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"mcp-greynoise@0.1.0"
],
"env": {
"GREYNOISE_API_KEY": "<YOUR_GREYNOISE_API_KEY>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"mcp-greynoise": {
"command": "npx",
"args": [
"-y",
"mcp-greynoise@0.1.0"
],
"env": {
"GREYNOISE_API_KEY": "<YOUR_GREYNOISE_API_KEY>"
}
}
}
}Let your agent find its tools
Find servers like mcp-greynoise from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.