MCP server · Security
ORKL Threat Intel MCP server
by fr0gger
Lets your AI pull threat reports, threat actors and intelligence sources from the ORKL database for you.

This is a small helper that connects your AI assistant to ORKL, a public database of threat intelligence. Once it is set up, you can ask your AI about recent threat reports or known threat actors and it will look them up for you. It is handy for anyone who reads security news or writes about cyber threats as part of their job.
What is an MCP server? The 30-second version
On its own, your AI can only chat with you using what it already learned. An MCP server is a small helper program that gives your AI a new skill or a connection to an app or service. This one connects your AI to ORKL, a threat intelligence database. So when you ask about a threat report or a threat actor, your AI can go and look it up there instead of guessing.
What this MCP server does
You ask your AI something like what are the latest threat reports. Your AI passes that request to this helper program. The helper talks to the ORKL service over the internet and asks for the list. ORKL sends back the titles and IDs, and your AI shows them to you in the chat. If you want more on one item, you ask again with its ID and the helper fetches the full details.
Click to zoomWhat you can do with it
- List the most recent threat reports
- Open a specific threat report by its ID
- List known threat actors with their names and IDs
- Look up details about one threat actor
- List the sources used in threat intelligence
- Look up details about one source
Try asking your AI
- “Show me the latest threat reports from ORKL”
- “Give me the details of threat report 12345”
- “List the known threat actors”
- “What sources does ORKL use for threat intelligence”
What it gives back to you
You get back lists and details as text in your chat. For example, a list of report titles with their IDs, or the full write-up of one report. For threat actors you get names and IDs, and for sources you get their metadata. Nothing is changed on your computer, it is all read-only lookups.
Before you start
What you need
- The Claude desktop app (or another app that supports MCP servers)
- The uv tool installed on your computer
- An internet connection to reach the ORKL service
Good to know
This server only reads information from ORKL, so it will not change or delete anything, but the reports it pulls are public threat intelligence and may not always be accurate or up to date.
Install it with your AI
Add ORKL Threat Intel MCP server to your AI, no technical skills needed
You don't install anything by hand. You copy one prompt, paste it into an AI that can work on your computer, and it checks, installs and connects the server for you, asking you when it needs something.
Sign in to get the install prompt
Members get a ready-made prompt that lets the Claude desktop app check ORKL Threat Intel MCP server, install it and connect it for them, step by step. You don't need any technical skills: you copy, paste and answer a few questions. Your connected AI can also find and install any of the 4,066 MCP servers here for you.
Who it's for
Security analysts, threat intelligence writers, and anyone who follows cyber threats and wants quick lookups without leaving their chat.





