INDIVIDUAL MCP TOOL

getMalwareProfile

Structured profiles of known ICS malware: PIPEDREAM, TRITON, INDUSTROYER2, CRASHOVERRIDE, FROSTYLOOP, BLACKENERGY.

ot-intel-api.onrender.comnone authenticationAvailability not checked

LIVE ENDPOINT

https://ot-intel-api.onrender.com/mcp

No auth detected

Connect to this endpoint to inspect the live schema for getMalwareProfile and invoke it with your own arguments.

{}

Inferred read-only · medium confidence · heuristic, not a guarantee.

No write-capable action terms were found; this is not proof that invocation has no side effects.

CONNECT WITH APPROVAL

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.ot-intel-api]
url = "https://ot-intel-api.onrender.com/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "ot-intel-api": {
      "type": "http",
      "url": "https://ot-intel-api.onrender.com/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: ot-intel-api
Remote MCP URL: https://ot-intel-api.onrender.com/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "ot-intel-api": {
      "url": "https://ot-intel-api.onrender.com/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "ot-intel-api": {
      "type": "http",
      "url": "https://ot-intel-api.onrender.com/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "ot-intel-api",
  "transport": "streamable-http",
  "url": "https://ot-intel-api.onrender.com/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

getCveTriage — CVE lookup enriched for ICS/SCADA environments.
getDeviceExposure — Exposure data for OT devices by vendor and model.
getThreatActor — ICS/APT threat actor profiles grounded in published vendor research.
getActorsBySector — All ICS threat actors targeting a specific industrial sector from live MITRE ATT&CK ICS STIX data.
getIocEnrichment — IOC enrichment via AlienVault OTX and AbuseIPDB.
getAdvisories — Latest CISA ICS-CERT advisories filtered by vendor or sector.
getPatchFeasibility — Full patch feasibility for a CVE in OT/ICS environments.
getAssetExposure — Synthesises vendor, model, firmware, sector, and network context into a branchable risk verdict.