Skip to main content
Glama
AOI-Future

secfeed

Official
by AOI-Future
OverviewSchemaRelated ServersScoreDiscussions
Python
Remote

secfeed

Security Intelligence MCP server — aggregates authoritative vulnerability, news, and threat-intel feeds into a local SQLite database and serves them to AI agents via MCP tools.

Every ingested item is auto-classified against the agent-security-manual threat taxonomy (TH-01..TH-10), so agents can pull an AI-agent-security focused feed and trace each threat to its mitigating controls (CT), requirements (REQ), and manual chapters.

Data sources

Category

Sources

Vulnerabilities

CISA KEV, NVD CVE API 2.0, EPSS, GitHub Security Advisories, GitHub PoC search

Threat intel

Abuse.ch ThreatFox, CISA Cybersecurity Advisories, arXiv cs.CR

News

The Hacker News, BleepingComputer, Krebs on Security, The Record, SANS ISC

Agent security

Simon Willison's blog, Embrace The Red

Related MCP server: wrg-mcp-server

MCP tools

Tool

Purpose

get_latest_cves

Recent CVEs sorted by EPSS exploit probability

get_cisa_kev

Known Exploited Vulnerabilities (confirmed in-the-wild)

get_security_news

Aggregated security news

search_security

FTS5 full-text search across all data

get_cve_detail

On-demand NVD + EPSS lookup for one CVE

get_threat_summary

24h threat landscape briefing + feed health

get_agent_threat_feed

Items tagged with agent threat classes TH-01..TH-10

lookup_taxonomy

Resolve TH/CT ids to controls, REQs, and manual chapters

get_agent_security_digest

Per-threat-class activity digest for posture review

Agent threat taxonomy

Classification is a deterministic two-tier keyword classifier (taxonomy.py): strong agent-specific patterns always tag; generic security terms tag only when AI/agent context is present in the same text. No LLM calls — results are reproducible and auditable.

ID

Threat class

TH-01

Prompt injection (direct / indirect)

TH-02

Tool abuse / privilege escalation

TH-03

RAG / knowledge-base poisoning

TH-04

Memory / context contamination

TH-05

Agent identity / authority abuse

TH-06

Delegation / multi-agent abuse

TH-07

Supply-chain / MCP / plugin compromise

TH-08

Data exfiltration / secret exposure

TH-09

Audit / evaluation evasion

TH-10

Model / service abuse

Deployment

docker compose up -d --build
docker logs --tail 80 secfeed

  • Streamable HTTP: http://<host>:8888/mcp (put a reverse proxy with auth in front for public exposure)

  • stdio mode: python3 server.py --stdio

  • Data volume: secfeed-data mounted at /data (SQLite + FTS5)

Environment variables

Variable

Purpose

NVD_API_KEY

Optional — higher NVD API rate limits

GITHUB_TOKEN

Optional — higher GitHub API rate limits

SECFEED_DB_PATH

DB path override (default /data/secfeed.db)

Secrets are injected via the compose environment block from the host environment — never commit them.

Development

python3 -m venv venv && venv/bin/pip install -r requirements.txt
SECFEED_DB_PATH=/tmp/secfeed-dev.db venv/bin/python3 server.py --stdio

License

MIT

This server cannot be installed

A
license - permissive license
-
quality - not tested
B
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • Mallory MCP Server by malloryai

    Mallory MCP Serverofficial

    malloryai
    A
    license
    A
    quality
    F
    maintenance
    A robust Model Control Protocol server that enables AI agents to access real-time cyber threat intelligence and detailed information about vulnerabilities, threat actors, malware, and other cyber-security entities.
    Last updated
    10
    8
    Apache 2.0

  • cve-mcp

    badchars
    A
    license
    A
    quality
    A
    maintenance
    Unifies NVD, EPSS, CISA KEV, GitHub Advisory, and OSV into a single MCP server, enabling AI agents to query vulnerability intelligence conversationally with 23 tools for incident response, prioritization, dependency audits, and threat monitoring.
    Last updated
    41
    324
    18
    MIT

  • darknet-mcp-server

    badchars
    A
    license
    A
    quality
    A
    maintenance
    Dark web & threat intelligence for AI agents. HIBP, ThreatFox, ransomware tracking, Tor .onion access, blockchain intel, exploit search, stealer logs, malware analysis — unified into a single MCP server.
    Last updated
    54
    66
    68
    295
    MIT

View all related MCP servers

Related MCP Connectors

  • security-intel-mcp

    CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

  • Security Intel MCP

    CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

  • ko-mcp

    Real SEC, 13F, insider, congress & macro data your AI agent can cite. Hosted MCP, 24 tools.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/AOI-Future/secfeed'

If you have feedback or need assistance with the MCP directory API, please join our Discord server