Threatweaver
v1.0.0A powerful MCP server built with NitroStack
Add via Cursor Settings UI (Settings > Features > MCP > Add New MCP Server):
{
"mcpServers": {
// your other mcp servers
"threatweaver": {
"url": "https://threatweaver-the-unprompted-amrita-university-amritapuri-campus.app.nitrocloud.ai/mcp"
}
}
}
Connect remote tools directly via Claude's Web UI:
Configure custom tools directly via ChatGPT's Web UI:
Add the following configuration block under mcpServers in your Antigravity configuration file (~/.gemini/config/mcp_config.json):
{
"mcpServers": {
// your other mcp servers
"threatweaver": {
"serverUrl": "https://threatweaver-the-unprompted-amrita-university-amritapuri-campus.app.nitrocloud.ai/mcp"
}
}
}
Add the following configuration block to your Codex configuration file (~/.codex/config.toml):
[mcp_servers.threatweaver] url = "https://threatweaver-the-unprompted-amrita-university-amritapuri-campus.app.nitrocloud.ai/mcp"
Connect directly using the Server-Sent Events endpoint:
https://threatweaver-the-unprompted-amrita-university-amritapuri-campus.app.nitrocloud.ai/mcp
Investigate an IOC (IP, domain, hash, or URL) across multiple threat intelligence sources (VirusTotal, AbuseIPDB, URLhaus, Shodan). Returns structured findings with reputation, abuse scores, geolocation, and ASN data.
Analyze current investigation context and suggest related IOCs to investigate next. Identifies shared ASNs, malware families, hostnames, and other relationships.
Analyze all findings in the current investigation to detect threat patterns. Identifies IOCs sharing ASNs, malware families, registrants, and geographic proximity. This is the core correlation feature.
Generate an investigation report in Markdown or STIX 2.1 format. Includes timeline, findings, threat classification, MITRE ATT&CK mappings, and correlation graph.
Investigate multiple IOCs in bulk with progress streaming. Validates all IOCs first, then investigates each one, updating the investigation context. Returns correlated findings after all IOCs are processed.