mcp-registry/io.github.project-gifted1/pg1-threat-intel · v1.20.2
As of 2026-10-22 22:05 UTC, the Project Gifted1 Pg1 Threat Intel MCP server is up with a Glimind reliability score of 97/100 (grade A). Over the last 30 days it answered 100% of Glimind's liveness checks. It had 1 outage in 90 days, with a median recovery of 17 minutes.
STIX indicators, CVE lookups/search w/ EPSS/CISA KEV, ATT&CK dossiers, alerts & subs.
Claude Code
claude mcp add --transport http project-gifted1-pg1-threat-intel-mcp-ser https://pg1-ai-agent.vercel.app/api/mcp
Claude Desktop · Windsurf · Cline (mcpServers JSON)
{
"mcpServers": {
"project-gifted1-pg1-threat-intel-mcp-ser": {
"type": "http",
"url": "https://pg1-ai-agent.vercel.app/api/mcp"
}
}
}
Third-party server, listed as discovered. Review its source before installing.
20 of 20 tool(s) carry no readOnlyHint/destructiveHint annotations.
Annotate read-only tools with {"readOnlyHint": true}. Agents and gateways can then run them without a confirmation prompt, and route around destructive ones. How to fix →
3 parameter(s) across 2 tool(s) have no description.
Add a "description" to each parameter with its format and an example ("ISO 8601 date, e.g. 2026-10-17"). This is the commonest cause of wrong arguments on the first call. How to fix →
1 tool(s) look like they change state (create/send/delete/pay…) but declare no destructiveHint.
Set annotations {"readOnlyHint": false, "destructiveHint": true|false, "idempotentHint": …}. Clients use these to ask the user before a side effect and to auto-approve safe reads. How to fix →
In the last 30 days: 1 tool(s) removed and 1 schema change(s).
Add new tools or optional parameters instead of renaming or removing; deprecate first (say so in the description) and remove later. Agents cache tool contracts. How to fix →
Paste-ready definitions with the problems above fixed. Changes marked verify need a human look. 2 tool(s) still need parameter descriptions written by someone who knows the API. All of them as JSON: /v1/readiness/mcp-registry%2Fio.github.project-gifted1%2Fpg1-threat-intel/fixes
{
"name": "check_agent_card",
"description": "PG1 Sovereign Threat Intelligence: checks another agent before you trust it. Fetches its /.well-known/agent-card.json (https only; private addresses and redirects refused): is it a valid A2A agent card, does its name claim a well-known brand the domain does not belong to, how old is the domain, is the hostname on the phishing blocklist or a look-alike. Always free (60/hour per caller). Give url or domain. Returns status flagged / no_flags / unknown; no_flags means no flags found, never \"safe\".",
"inputSchema": {
"type": "object",
"properties": {
"url": {
"type": "string",
"maxLength": 2048,
"description": "The agent's https URL or its agent card URL."
},
"domain": {
"type": "string",
"maxLength": 253,
"description": "Or just the agent's domain."
}
},
"additionalProperties": false
},
"annotations": {
"readOnlyHint": true
}
}{
"name": "check_domain_age",
"description": "PG1 Sovereign Threat Intelligence: looks up a domain's registration age via RDAP (the IANA-standardized WHOIS successor), resolved through the IANA bootstrap registry for the correct per-TLD RDAP server. No payment required — this tool is always free. SIBLING DIFFERENTIATION: Use for domain registration/age checks only. Do NOT use for reputation/threat-feed lookups (use get_ioc_context) or sanctions screening (use check_wallet_sanctions). BEHAVIOR: Returns { found: true, available: true, registr",
"inputSchema": {
"type": "object",
"required": [
"domain"
],
"properties": {
"domain": {
"type": "string",
"description": "Mandatory domain name or URL to check, e.g. 'example.com' or 'https://example.com/path'. The registrable domain is extracted automatically."
}
}
},
"annotations": {
"readOnlyHint": true
}
}{
"name": "check_hostname_reputation",
"description": "PG1 Sovereign Threat Intelligence: checks a single hostname against the MetaMask eth-phishing-detect blocklist/allowlist and a lookalike/typosquat detector, synced daily by the sovereign-threat-pipeline. No payment required — this tool is always free. SIBLING DIFFERENTIATION: Use for phishing/lookalike-domain screening of a hostname only. Do NOT use for domain registration age (use check_domain_age), general threat-feed indicator lookups (use get_ioc_context), or wallet sanctions screening (use ",
"inputSchema": {
"type": "object",
"required": [
"hostname"
],
"properties": {
"hostname": {
"type": "string",
"description": "Mandatory bare hostname to screen, e.g. 'example.com'. Not a URL — no scheme, path, port, spaces, or wildcards. One hostname per call."
}
}
},
"annotations": {
"readOnlyHint": true
}
}Get an email or webhook when this server's readiness drops by 10+ points, tool-poisoning text appears, or a tool breaks:
curl -X POST https://glimind.com/v1/subscriptions -H 'content-type: application/json' -d '{"tools":["mcp-registry/io.github.project-gifted1/pg1-threat-intel"],"email":"[email protected]"}'Agents: watch_tool({"toolId": "mcp-registry/io.github.project-gifted1/pg1-threat-intel"}) over MCP.
hosting_advisor ~491 tokensget_threat_indicators ~374 tokenspreflight_check ~349 tokenscheck_package ~284 tokenscheck_wallet_age ~281 tokensStatic checks of the advertised tools/list (schema, descriptions, annotations, tool-poisoning patterns, names, size) plus observed protocol, uptime, latency and contract changes. Read-only: no tool is ever called. Weights: schema 15, docs 20, safety 15, efficiency 15, compatibility 15, protocol 5, reliability 10, stability 5. Token counts are estimates (~3.6 characters per token).
Operator? Fix these, then re-check live. Embed the readiness badge:
[](https://glimind.com/server/mcp-registry%2Fio.github.project-gifted1%2Fpg1-threat-intel?ref=badge)
<a href="https://glimind.com/server/mcp-registry%2Fio.github.project-gifted1%2Fpg1-threat-intel?ref=badge"><img src="https://glimind.com/v1/readiness/badge/mcp-registry%2Fio.github.project-gifted1%2Fpg1-threat-intel.svg" alt="MCP agent-readiness"></a>
.. image:: https://glimind.com/v1/readiness/badge/mcp-registry%2Fio.github.project-gifted1%2Fpg1-threat-intel.svg :target: https://glimind.com/server/mcp-registry%2Fio.github.project-gifted1%2Fpg1-threat-intel?ref=badge :alt: MCP agent-readiness
Glimind records every version of this server's tool definitions in a signed, append-only transparency log. Current manifest sha256:5de60ec07618ff2c…, first seen 2026-10-18, included at leaf 19447 of 48,396. Version history · verify what your client received.
Compare: most reliable security servers · most reliable other servers · most reliable data servers · most reliable finance servers · most reliable web servers
Glimind tells agents whether a server is up right now and how to call it, then fails over to a live alternative when it isn't.
Claude Code
claude mcp add --transport http glimind https://glimind.com/mcp
Claude Desktop · Windsurf · Cline (mcpServers JSON)
{
"mcpServers": {
"glimind": {
"type": "http",
"url": "https://glimind.com/mcp"
}
}
}
As of 2026-10-22 22:05 UTC, the Project Gifted1 Pg1 Threat Intel MCP server is up with a Glimind reliability score of 97/100 (grade A). Over the last 30 days it answered 100% of Glimind's liveness checks. It had 1 outage in 90 days, with a median recovery of 17 minutes.
Project Gifted1 Pg1 Threat Intel MCP server advertises 21 tools, including check_agent_card, check_domain_age, check_hostname_reputation, check_ip_abuse, check_package.
Point your MCP client at this streamable-http endpoint: https://pg1-ai-agent.vercel.app/api/mcp
Glimind scanned all 20 tool definitions for tool-poisoning patterns — hidden or invisible characters, instructions that override the model, concealment from the user, requests to read credential or MCP config files, conversation exfiltration and cross-tool shadowing — and found none. This checks what the server tells the model, not what its code does; review the source before granting access to sensitive data.
Status page: 90-day uptime, every outage and how long it lasted.
Claim this listing to get the Verified operator marker, a remediation checklist and owner analytics, or embed the live badge from any of the tool pages above. Maintainers: alerts, deploy attestation and monthly reports.
Status is an automated estimate from Glimind's liveness checks (handshake and tool listing only; no tool is ever called) and may lag or differ from your network. Glimind is not affiliated with this server or its operator. Operator? Request a correction or opt out at https://glimind.com/opt-out.