Search / io.github.Servosity/threatdown-mcp
ThreatDown MCP
L0· runs locallyEvery ThreatDown OneView API, plus fleet-wide stale-endpoint, health and seat reports across all
v0.1.1 · active · repository · descriptor JSON · versions
Search / io.github.Servosity/threatdown-mcp
L0· runs locallyEvery ThreatDown OneView API, plus fleet-wide stale-endpoint, health and seat reports across all
v0.1.1 · active · repository · descriptor JSON · versions
{
"bundle": "https://github.com/Servosity/msp-skills/releases/download/threatdown-v0.1.1/threatdown-mcp.mcpb",
"registry_type": "mcpb",
"note": "Install through the client's bundle installer; no command line form."
}{
"bundle": "https://github.com/Servosity/msp-skills/releases/download/threatdown-v0.1.1/threatdown-mcp.mcpb",
"registry_type": "mcpb",
"note": "Install through the client's bundle installer; no command line form."
}{
"bundle": "https://github.com/Servosity/msp-skills/releases/download/threatdown-v0.1.1/threatdown-mcp.mcpb",
"registry_type": "mcpb",
"note": "Install through the client's bundle installer; no command line form."
}{
"bundle": "https://github.com/Servosity/msp-skills/releases/download/threatdown-v0.1.1/threatdown-mcp.mcpb",
"registry_type": "mcpb",
"note": "Install through the client's bundle installer; no command line form."
}{
"bundle": "https://github.com/Servosity/msp-skills/releases/download/threatdown-v0.1.1/threatdown-mcp.mcpb",
"registry_type": "mcpb",
"note": "Install through the client's bundle installer; no command line form."
}{
"bundle": "https://github.com/Servosity/msp-skills/releases/download/threatdown-v0.1.1/threatdown-mcp.mcpb",
"registry_type": "mcpb",
"note": "Install through the client's bundle installer; no command line form."
}{
"bundle": "https://github.com/Servosity/msp-skills/releases/download/threatdown-v0.1.1/threatdown-mcp.mcpb",
"registry_type": "mcpb",
"note": "Install through the client's bundle installer; no command line form."
}{
"bundle": "https://github.com/Servosity/msp-skills/releases/download/threatdown-v0.1.1/threatdown-mcp.mcpb",
"registry_type": "mcpb",
"note": "Install through the client's bundle installer; no command line form."
}Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)stability.changes, stability.rug_pulltool list unknowndeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo ~liveness-unmeasured +updated-4d-ago -duplicate-repo(83 names)
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
https://github.com/Servosity/msp-skills/releases/download/threatdown-v0.1.1/threatdown-mcp.mcpb | mcpb | 0.1.1 | – | THREATDOWN_CLIENT_ID, THREATDOWN_CLIENT_SECRET, THREATDOWN_MCP_HTTP_TOKEN |
No tools observed. Local packages are never executed by the registry.
Schemas: list_tools.
82 other active names share this repository (showing 10): io.github.Servosity/abnormal-mcp, io.github.Servosity/acronis-mcp, io.github.Servosity/action1-mcp, io.github.Servosity/afi-mcp, io.github.Servosity/appdirect-mcp, io.github.Servosity/atera-mcp, io.github.Servosity/autotask-mcp, io.github.Servosity/auvik-mcp, io.github.Servosity/avanan-mcp, io.github.Servosity/aws-billing-mcp
And 76 more from this publisher.
{
"name": "io.github.Servosity/threatdown-mcp",
"icons": [
{
"src": "https://raw.githubusercontent.com/servosity/msp-skills/main/docs/assets/social/threatdown/threatdown-512x512.png",
"sizes": [
"512x512"
],
"mimeType": "image/png"
}
],
"title": "ThreatDown MCP",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.1.1",
"packages": [
{
"version": "0.1.1",
"transport": {
"type": "stdio"
},
"fileSha256": "12ec5304a9841843e9aa0af48808bb106dc65552894c6e2cf74e3c836e221001",
"identifier": "https://github.com/Servosity/msp-skills/releases/download/threatdown-v0.1.1/threatdown-mcp.mcpb",
"registryType": "mcpb",
"environmentVariables": [
{
"name": "THREATDOWN_CLIENT_ID",
"isSecret": true,
"isRequired": true,
"description": "Set the THREATDOWN_CLIENT_ID credential for the ThreatDown MCP server."
},
{
"name": "THREATDOWN_CLIENT_SECRET",
"isSecret": true,
"isRequired": true,
"description": "Set the THREATDOWN_CLIENT_SECRET credential for the ThreatDown MCP server."
},
{
"name": "THREATDOWN_OAUTH_SCOPE",
"description": "Optional: space-separated OAuth scopes to request; default `execute read write`."
},
{
"name": "THREATDOWN_BASE_URL",
"description": "Optional: override the OneView API base URL (default https://api.threatdown.com/oneview)."
},
{
"name": "THREATDOWN_TOKEN_URL",
"description": "Optional: override the OAuth2 token endpoint."
},
{
"name": "THREATDOWN_USER_AGENT",
"description": "Optional: override the User-Agent the CLI sends on OneView requests."
},
{
"name": "THREATDOWN_MCP_READ_ONLY",
"description": "Optional: set to 1 to run the MCP server read-only."
},
{
"name": "THREATDOWN_MCP_HTTP_TOKEN",
"isSecret": true,
"description": "Bearer token callers must present when the server runs with --transport http; not used by the stdio transport."
},
{
"name": "PRINTING_PRESS_CLIENT_PROFILE",
"description": "Not enforced by this connector (no tenant-gated profiles); leave unset. It does not limit which sites a call can reach."
}
]
}
],
"repository": {
"url": "https://github.com/servosity/msp-skills",
"source": "github",
"subfolder": "skills/threatdown"
},
"description": "Every ThreatDown OneView API, plus fleet-wide stale-endpoint, health and seat reports across all"
}