English Français العربية

Rösti Threat Intel

Official registry Search and web

Look up IOCs and search threat-intel reports, YARA rules, MITRE ATT&CK ids and CVEs from rosti.dev

Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http r-sti-threat-intel 'https://mcp.rosti.dev/mcp' --header 'X-API-Key: <Optional: your own Rösti API key from https://rosti.dev/api for your own quota. Without it, sign in with Rösti or use the shared anonymous quota.>'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "r-sti-threat-intel": {
            "type": "http",
            "url": "https://mcp.rosti.dev/mcp",
            "headers": {
                "X-API-Key": "<Optional: your own Rösti API key from https://rosti.dev/api for your own quota. Without it, sign in with Rösti or use the shared anonymous quota.>"
            }
        }
    }
}

Frequently asked questions

What is Rösti Threat Intel?

Look up IOCs and search threat-intel reports, YARA rules, MITRE ATT&CK ids and CVEs from rosti.dev

How do I install Rösti Threat Intel?

It runs as a remote server. In Claude Code: claude mcp add --transport http r-sti-threat-intel 'https://mcp.rosti.dev/mcp' --header 'X-API-Key: <Optional: your own Rösti API key from https://rosti.dev/api for your own quota. Without it, sign in with Rösti or use the shared anonymous quota.>'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Rösti Threat Intel need an API key?

Yes. It expects X-API-Key, which you set in its configuration.

Who maintains Rösti Threat Intel?

It is published by dev.rosti. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.