Connects Claude to GreyNoise's Community API for classifying IP addresses as internet scanners, bots, or benign traffic. Useful when you're investigating suspicious IPs, triaging security alerts, or need to quickly distinguish between malicious scanners and legitimate research traffic. Runs through Pipeworx's gateway infrastructure, which means you can either use it standalone or access it alongside 250+ other data sources through a single connection. The implementation includes an ask_pipeworx tool that handles natural language queries instead of forcing you to remember exact parameter names. Requires a free GreyNoise Community API key to get started.
GreyNoise Community MCP — internet scanner classification (free tier with key)
Part of Pipeworx — an MCP gateway connecting AI agents to 673+ live data sources.
| Tool | Description |
|---|
Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):
{
"mcpServers": {
"greynoise": {
"url": "https://gateway.pipeworx.io/greynoise/mcp"
}
}
}
Or connect to the full Pipeworx gateway for access to all 673+ data sources:
{
"mcpServers": {
"pipeworx": {
"url": "https://gateway.pipeworx.io/mcp"
}
}
}
Instead of calling tools directly, you can ask questions in plain English:
ask_pipeworx({ question: "your question about Greynoise data" })
The gateway picks the right tool and fills the arguments automatically.
MIT