Connects Claude to the URLhaus database from abuse.ch, a free threat intelligence feed tracking malicious URLs associated with malware distribution. No authentication required. Hosted by Pipeworx as a streamable HTTP endpoint, so you can drop the gateway URL directly into your MCP config and start querying. The source doesn't list specific tools, but URLhaus typically offers lookups by URL, hash, tag, and signature to check if domains or links are flagged for malware. Useful when you need Claude to verify suspicious URLs during security analysis, threat hunting, or incident response workflows without leaving the conversation.
URLhaus MCP — wraps abuse.ch URLhaus malware URL database (free, no auth)
Part of Pipeworx — an MCP gateway connecting AI agents to 673+ live data sources.
| Tool | Description |
|---|
Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):
{
"mcpServers": {
"urlhaus": {
"url": "https://gateway.pipeworx.io/urlhaus/mcp"
}
}
}
Or connect to the full Pipeworx gateway for access to all 673+ data sources:
{
"mcpServers": {
"pipeworx": {
"url": "https://gateway.pipeworx.io/mcp"
}
}
}
Instead of calling tools directly, you can ask questions in plain English:
ask_pipeworx({ question: "your question about Urlhaus data" })
The gateway picks the right tool and fills the arguments automatically.
MIT
hovecapital/read-only-local-postgres-mcp-server
cocaxcode/database-mcp
io.github.infoinlet-marketplace/mcp-mysql
io.github.cybeleri/database-admin
io.github.yash-0620/postgres-mcp-secured