Name: OT Intel API
Author: No3men60

OT Intel API MCP

OT/ICS threat intel for AI agents: 40 tools, pay per call in USDC on Base via x402.

Tool-list grade A Remote · Streamable HTTP No auth needed 40 tools v2.0.0

No reviews yet by No3men60 The publisher’s own endpoint — this marketplace is not in the path

93/100

tool-list score

tools declared

remote

at its publisher

—

calls last 7d

What it does

OT/ICS threat intel for AI agents: 40 tools, pay per call in USDC on Base via x402.

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http ot-intel-api-mcp https://ot-intel-api.onrender.com/mcp

# 2 — ask your agent for something these tools do
#   getCveTriage, getDeviceExposure, getThreatActor and 37 more

OT Intel API costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

No3men601 server

1 category

All 1 server

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

CVE lookup enriched for ICS/SCADA environments. Returns OT-adjusted severity, cyber-physical impact, affected ICS layer, compensating controls, patch feasibility, and CISA KEV status. Price: $0.02 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
id	string	yes	CVE identifier e.g. CVE-2023-38802

Exposure data for OT devices by vendor and model. Default credential risk, exposed OT protocols (Modbus/502, S7comm/102, DNP3/20000, PCOM/20256), and hardening recommendations. Price: $0.05 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
vendor	string	yes	Vendor e.g. siemens, schneider, rockwell, honeywell, unitronics, ge, beckhoff
model	string	yes	Device model e.g. s7-1200, modicon-m340, controllogix, vision

ICS/APT threat actor profiles grounded in published vendor research. MITRE ATT&CK for ICS techniques, known malware, attribution, physical impact, targeted sectors. Alias lookup: Volt Typhoon→VOLTZITE, APT44→SANDWORM. Price: $0.03 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment

Parameter	Type	Required	Notes
name	string	yes	Actor name or alias e.g. SANDWORM, VOLTZITE, XENOTIME, Volt Typhoon

All ICS threat actors targeting a specific industrial sector from live MITRE ATT&CK ICS STIX data. Price: $0.03 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
sector	string	yes	Sector e.g. energy, water, manufacturing, oil-and-gas, chemical, nuclear

IOC enrichment via AlienVault OTX and AbuseIPDB. Returns verdict on whether the IOC is linked to ICS-targeting campaigns. Price: $0.01 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
value	string	yes	IP address or domain
type	string	yes	IOC type: ip or domain

Latest CISA ICS-CERT advisories filtered by vendor or sector. Returns advisory IDs, CVSS scores, CVE lists, OT severity, and direct triage links. Price: $0.02 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
vendor	string	no	Vendor filter e.g. siemens, schneider, rockwell
sector	string	no	Sector filter e.g. energy, water, manufacturing
limit	integer	no	Page size, default 10

Full patch feasibility for a CVE in OT/ICS environments. Returns patch availability, OT-safe workarounds, estimated downtime, safe-to-patch-live flag, and risk-vs-disruption score (1-10). Price: $0.05 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
id	string	yes	CVE identifier e.g. CVE-2021-34527

Synthesises vendor, model, firmware, sector, and network context into a branchable risk verdict. Returns risk_score (0-100), escalate (boolean), recommended_action, and contributing threat actors. Price: $0.05 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
vendor	string	yes	e.g. siemens, schneider, rockwell, ge, honeywell
model	string	yes	e.g. s7-1500, modicon-m340, controllogix
sector	string	yes	energy \| water \| manufacturing \| oil-and-gas \| chemical \| nuclear
network	string	yes	internet-facing \| dmz \| lan-only \| air-gapped
firmware	string	no	Firmware version e.g. 2.9.2 — enables firmware-specific CVE matching

Active campaigns targeting a specific industrial sector. Returns campaign name, attributed actor, start date, targeted geography, TTPs in use, and CVEs being exploited. Price: $0.05 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
sector	string	yes	energy \| water \| manufacturing \| oil-and-gas \| electric \| nuclear \| chemical
status	string	no	active (default) or all

What is NEW for a sector in the last N days — new CVEs, new CISA advisories, new actor activity. Designed for cron-based monitoring agents. Only returns changes. Price: $0.03 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
sector	string	yes	Sector to monitor e.g. energy, water, manufacturing
days	integer	no	Lookback window in days, default 7

Structured profiles of known ICS malware: PIPEDREAM, TRITON, INDUSTROYER2, CRASHOVERRIDE, FROSTYLOOP, BLACKENERGY. Returns capabilities, targeted OT protocols, attributed actor, and MITRE ATT&CK for ICS techniques. Price: $0.02 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
name	string	yes	Malware name e.g. PIPEDREAM, TRITON, INDUSTROYER2, CRASHOVERRIDE

Complete 30-day threat brief for an industrial sector. Returns active actors, new CVE counts, active campaigns, top advisories, risk trend (increasing/stable/decreasing), and top 3 recommended actions. One call replaces 5+ chained calls. Price: $0.10 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in

Parameter	Type	Required	Notes
sector	string	yes	Sector e.g. energy, water, manufacturing, oil-and-gas, nuclear
period	integer	no	Reporting period in days, default 30

Profiles an ASN for ICS threat actor infrastructure use. Returns actor associations (SANDWORM, VOLTZITE, XENOTIME), phishing kit links (Tycoon2FA, EvilProxy, NakedPages), bulletproof hosting indicators, abuse categories (c2, staging, phishing), and an OT-specific blocking recommendation with WAF rule hint. Price: $0.03 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentR

Parameter	Type	Required	Notes
asn	string	yes	ASN identifier e.g. AS215540, AS9009, AS29802
org	string	no	Optional org name fragment e.g. hivelocity, m247

Returns YARA/Sigma detection rules for an ICS malware family or threat actor. Rules sourced from public corpus (Florian Roth signature-base, CISA advisories) are marked validated:true and safe for staging. DeepSeek-synthesised rules carry validated:false and require lab testing. Designed for automated threat hunting pipelines that commit rules to SIEMs and EDRs. Price: $0.05 USDC per call via x402

Parameter	Type	Required	Notes
target	string	yes	Malware or actor name e.g. PIPEDREAM, INDUSTROYER2, TRITON, SANDWORM, CHERNOVITE
format	string	no	Rule format filter (default: all)

Returns triggered compliance controls for a CVE or threat actor across 11 frameworks: NERC CIP, IEC 62443 (2-1/2-4/3-2/3-3/4-2), NIST 800-82, NIST CSF 2.0, CISA CPG, Saudi NCA OTCC, and UAE NESA IA. Deterministic table lookup — LLM only adds compensating control prose. Designed for automated compliance reporting agents: call when a new advisory drops, generate gap report, route to compliance team.

Parameter	Type	Required	Notes
cve_id	string	no	CVE identifier e.g. CVE-2023-38802
actor	string	no	Threat actor name e.g. SANDWORM, VOLTZITE, XENOTIME
framework	string	no	Optional filter to one compliance framework. Omit or pass 'all' to return matches across every framework.

Rolls up compliance-gap mapping across multiple CVEs/threat actors in a single call. Deterministic per-item table lookup against the same compliance_mappings data as /ot/compliance, deduplicated and rolled up into one aggregate severity rating. LLM only writes the remediation summary prose. Price: $0.20 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challeng

Parameter	Type	Required	Notes
items	string	yes	Comma-separated CVE IDs and/or actor names, max 25, e.g. CVE-2023-38802,CVE-2024-12345,SANDWORM,XENOTIME. Each token auto-detected as a CVE ID or treated as an actor name.
framework	string	no	Optional filter to one compliance framework.
entity_sector	string	no	Informs the remediation summary's tone/priority framing only — does not filter which controls match.

Deterministic capability x opportunity x intent threat score for an actor-target pairing. Scored from actor/CVE/campaign data plus GDELT geopolitical tension and OFAC sanctions pressure. Not LLM-generated. Price: $0.04 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
actor	string	yes	ICS threat actor name e.g. SANDWORM, VOLTZITE, XENOTIME
sector	string	yes	Target sector e.g. energy, water, manufacturing
region	string	yes	Target region or country e.g. Europe, GCC, Ukraine
vendor_stack	string	yes	Comma-separated OT/ICS vendors in the target environment e.g. Siemens,Schneider Electric. Pass 'none' if unknown.

Buckets an actor's known ATT&CK-for-ICS TTPs into pre-impact (reconnaissance through command-and-control — the early-warning window before physical/process disruption) vs impact-stage (inhibit-response-function, impair-process-control, impact). Deterministic tactic-taxonomy lookup against intel.db — no LLM in the classification path. Price: $0.04 USDC per call via x402 on Base mainnet. An unpaid c

Parameter	Type	Required	Notes
actor	string	yes	ICS threat actor name e.g. SANDWORM, VOLTZITE, XENOTIME

Ranks which sensors most likely drove a reported anomaly by z-score deviation from each sensor's own baseline, given a caller-supplied telemetry window. Fully deterministic, no LLM, no trained model. Statistical approximation inspired by Oswal et al. 2025 (kernel SHAP + TCAE) — not a SHAP/TCAE reimplementation. Price: $0.15 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 Pay

Parameter	Type	Required	Notes
window	string	yes	URL-encoded JSON array, max 20 entries: [{sensor_id, values[], baseline_mean?, baseline_stddev?}]
top_k	integer	no	How many ranked sensors to return
anomaly_event_id	string	no	Optional correlation ID, echoed back unchanged

Flags control-loop recon patterns and living-off-the-land/RMM-tool abuse from caller-submitted process/command observations. Fully deterministic keyword-pattern matching, no LLM. Grounded in CyberAgentX and AgenticCyOps (arXiv 2603.09134). ADVISORY ONLY — never executes containment or any network action. Price: $0.15 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentReq

Parameter	Type	Required	Notes
observed_processes	string	no	Comma-separated process/tool names observed. At least one of observed_processes or observed_commands is required.
observed_commands	string	no	Comma-separated command strings observed. Must not contain literal commas within a command.
zone	string	no	Asset zone. Any RMM/LOTL match on OT is always scored HIGH.

Checks whether a tank/vessel's reported level change is physically consistent with its reported flow-in/flow-out via conservation of mass. Fully deterministic, no LLM, no trained model. Inspired by Barbhaya et al. 2025's physical-invariant residual check — flags inconsistency and direction, does not assert a specific cause. Price: $0.20 USDC per call via x402 on Base mainnet. An unpaid call return

Parameter	Type	Required	Notes
asset_id	string	yes	Identifier for the tank/vessel being checked
flow_in	number	yes	Metered inflow rate
flow_out	number	yes	Metered outflow rate
level_start	number	yes	Level reading at start of interval
level_end	number	yes	Level reading at end of interval
dt_seconds	number	yes	Interval duration in seconds, must be > 0
tank_area	number	yes	Cross-sectional area, must be > 0
noise_floor	number	no	Residual magnitude below which reading is treated as consistent

OT/ICS supply-chain vendor risk assessment. Returns risk tier, confidence, cited CVEs (KEV/EPSS), threat actors with historical targeting interest, and supply-chain mitigation recommendations. DeepSeek-synthesised, ICD-203 language. Price: $0.15 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _met

Parameter	Type	Required	Notes
vendor	string	yes	OT/ICS vendor name e.g. Schneider Electric, Siemens, Rockwell Automation
product	string	no	Optional product line filter e.g. Modicon, SIMATIC

Aggregates the same deterministic capability x opportunity x intent scoring used by /ot/threat-score across the actors relevant to a sector+region, ranks them, and returns a DeepSeek-written executive summary (BLUF, ICD-203 language). Portfolio-level companion to /ot/threat-score — for vCISO agents and GRC/board-reporting automation. Price: $0.40 USDC per call via x402 on Base mainnet. An unpaid c

Parameter	Type	Required	Notes
sector	string	yes	Target sector e.g. energy, water, manufacturing
region	string	yes	Target region e.g. GCC, KSA, UAE, Qatar, Europe
compliance_framework	string	no	Optional — framework to note qualitatively in the narrative e.g. NIST_CSF_2_0, IEC_62443_3_2
timeframe	string	no	Optional lookback window, default 90d
vendor_stack	string	no	Optional comma-separated vendor list e.g. 'Schneider Modicon,Siemens SIMATIC' — feeds each actor's capability score, same as /ot/threat-score

Deterministic auto_approve/human_review/reject verdict for a planned remediation action (block_ip, quarantine_host, halt_pipeline, etc.) against an actor/sector/region context. Built on the same capability x opportunity x intent scoring as /ot/threat-score, with auditable rules layered on top — no LLM in the decision path. auto_approve requires vendor_stack; omitting it caps the verdict at human_r

Parameter	Type	Required	Notes
actor	string	yes	ICS threat actor name e.g. SANDWORM, VOLTZITE, XENOTIME
sector	string	yes	Target sector e.g. energy, water, manufacturing
region	string	yes	Target region e.g. GCC, KSA, UAE, Europe
planned_action	string	yes	The remediation action being gated
asset_context	string	no	Optional free text, e.g. 'shared_infra:cloudflare' — escalates to human_review when shared cloud/CDN infra is detected
vendor_stack	string	no	Comma-separated vendor list e.g. 'Schneider Modicon,Siemens SIMATIC'. REQUIRED for auto_approve to be reachable at all; omitting it caps the verdict at human_review.

AI/agentic copilot exposure lookup for OT/ICS vendors. Returns the vendor's documented AI/agentic copilot, autonomy level (advisory vs agentic — the key risk differentiator), access, and applicable MITRE ATLAS techniques. Hand-verified mapping, ATLAS IDs confirmed against the live atlas.mitre.org matrix. Deterministic, no LLM in the lookup path. Price: $0.20 USDC per call via x402 on Base mainnet.

Parameter	Type	Required	Notes
vendor	string	yes	OT/ICS vendor name e.g. Siemens, Schneider Electric, Rockwell Automation, ABB, Emerson, Honeywell, Yokogawa, GE Vernova, Omron, Mitsubishi Electric

Assesses how much a general-purpose AI agent lowers the skill/time barrier for an attacker to reach a vendor's OT-adjacent footprint. Grounded in a real-world precedent (Dragos, May 2026), not frontier-model governance thresholds. Distinct from /ot/ai-exposure, which covers a vendor's OWN embedded AI copilot. DeepSeek-synthesised, ICD-203 estimative language. Price: $0.20 USDC per call via x402 on

Parameter	Type	Required	Notes
vendor	string	yes	OT/ICS vendor name e.g. Schneider Electric, Siemens, Rockwell Automation
product	string	no	Optional product line filter e.g. Modicon, SIMATIC
internet_facing	string	no	true, false, or unknown (default)
auth_type	string	no	single-factor, mfa, or unknown (default)
segmented	string	no	true, false, or unknown (default). If all three deployment-context params are unknown, the tier is capped at informational.

Deterministic lookup against one specific empirical study (Cook, Stoica, Shah & Pezaros, ACM Trans. Priv. Sec. 29, 3, Article 31, June 2026) testing whether off-the-shelf general-purpose LLMs can generate working attack code against real PLCs. Only 3 vendors tested (Siemens, Schneider Electric, Rockwell Automation); only Network/Register-Tags techniques ever succeeded (zero for Application Code/Fi

Parameter	Type	Required	Notes
technique	string	no	MITRE ICS technique name or ID, e.g. 'Brute Force I/O' or T0806. At least one of technique, vendor, or campaign required.
vendor	string	no	Siemens, Schneider Electric, or Rockwell Automation — only these three were tested in the study.
campaign	string	no	Industroyer2, Fuxnet, FrostyGoop, INCONTROLLER, Stuxnet, or Triton.

Grounded in Meng et al., 'Uncovering Vulnerabilities of LLM-Assisted Cyber Threat Intelligence' (arXiv:2509.23573v3, Feb 2026). Classifies a CTI claim against the paper's three failure modes — spurious correlation, contradictory knowledge, constrained generalization — using intel.db grounding plus DeepSeek synthesis. Returns a reliability score, verdict, corroborating/contradicting evidence, and c

Parameter	Type	Required	Notes
claim	string	yes	The CTI claim to assess, e.g. an actor-targeting, attribution, or TTP claim.
actor	string	no	Optional actor name to ground the claim against intel.db, e.g. SANDWORM.
cve_id	string	no	Optional CVE ID to ground the claim against intel.db.

Deterministic lookup grounded in Hahn, Krief et al., 'An Evidence-Driven Analysis of Threat Information Sharing Challenges for Industrial Control Systems' (arXiv:2512.18714v3, Jan 2026). Returns whether STIX 2.1 can represent a given technique/protocol/CVE's artifacts (full/partial/none) and whether public reporting gave enough technical detail to be actionable for detection engineering. No LLM in

Parameter	Type	Required	Notes
technique_id	string	no	MITRE ATT&CK ICS technique ID, e.g. T0836. At least one of technique_id, protocol, or cve_id is required.
campaign	string	no	Optional filter: Triton, Stuxnet, or Industroyer.
protocol	string	no	ICS protocol name, e.g. TriStation, S7Comm, CIP. At least one of technique_id, protocol, or cve_id is required.
cve_id	string	no	CVE ID from the paper's CISA KEV table, e.g. CVE-2023-3595. At least one of technique_id, protocol, or cve_id is required.

Prescriptive D3FEND-mapped mitigation guidance for OT/ICS threats. Pass one of actor, cve_id, or technique_id, optionally with vendor_stack. Returns matched ATT&CK ICS techniques mapped to D3FEND defensive countermeasures with priority and rationale, plus prescriptive architecture recommendations. DeepSeek-synthesised, ICD-203 estimative language. Price: $0.20 USDC per call via x402 on Base mainne

Parameter	Type	Required	Notes
actor	string	no	Threat actor name e.g. SANDWORM. At least one of actor, cve_id, or technique_id is required.
cve_id	string	no	CVE identifier. At least one of actor, cve_id, or technique_id is required.
technique_id	string	no	MITRE ATT&CK ICS technique ID e.g. T0836. At least one of actor, cve_id, or technique_id is required.
vendor_stack	string	no	Optional vendor/product context e.g. Schneider Modicon

Synthesised Markdown threat report for an ICS/APT actor. Fans out to /ot/actor, /ot/campaign, /ot/malware, /ot/advisory, /ot/detection internally (no extra charge) and synthesises via DeepSeek. Returns executive summary, actor profile, active campaigns, malware families, sector targeting, ATT&CK mappings, recommended actions. TLP: WHITE. Price: $0.25 USDC per call via x402 on Base mainnet. An unpa

Parameter	Type	Required	Notes
actor	string	yes	Actor name e.g. CHERNOVITE, SANDWORM, VOLTZITE, XENOTIME
sector	string	no	Optional sector focus e.g. energy, water, manufacturing

Comprehensive intelligence dossier for an ICS threat actor. Fans out to /ot/actor, /ot/campaign, /ot/malware, /ot/ioc, /ot/asn, /ot/detection. Returns full profile, infrastructure analysis, IOC table, detection rules, kill chain mapping, and MITRE ATT&CK coverage. Price: $0.35 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call

Parameter	Type	Required	Notes
actor	string	yes	Actor name e.g. SANDWORM, XENOTIME, VOLTZITE

30-day situation report for an industrial sector. Fans out to /ot/actor/sector, /ot/advisory, /ot/campaign, /ot/delta, /ot/compliance. Returns threat landscape, top active actors, new advisories, what changed, compliance posture impact, and weekly recommended priorities. Price: $0.35 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identic

Parameter	Type	Required	Notes
sector	string	yes	energy \| water \| manufacturing \| oil-and-gas \| electric \| nuclear \| chemical
period	integer	no	Lookback days, default 30

Publication-ready threat intelligence article (~700 words). Fans out to /ot/actor or /ot/cve + /ot/campaign + /ot/malware + /ot/advisory. DeepSeek writes in journalistic CTI style with headline, lede, body, defanged IOCs, and TLP marking. Suitable for threat intel blog posts or advisories. Price: $0.45 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge

Parameter	Type	Required	Notes
actor	string	no	Actor name e.g. CHERNOVITE (required if no cve)
cve	string	no	CVE ID e.g. CVE-2024-12345 (required if no actor)
sector	string	no	Optional sector context

LinkedIn post for a CTI/ICS security audience. Fans out to /ot/actor or /ot/cve + /ot/advisory. Returns hook line, 3-5 intelligence bullet observations, call to action, and hashtags. Ready to publish. Price: $0.15 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
actor	string	no	Actor name e.g. VOLTZITE (required if no cve)
cve	string	no	CVE ID (required if no actor)

X/Twitter thread for an actor or CVE. Fans out to /ot/actor or /ot/cve. Returns 5-7 posts: hook, intel posts with ATT&CK IDs and affected systems, mitigation post, and hashtag post. Each post under 280 characters. Price: $0.10 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
actor	string	no	Actor name e.g. XENOTIME (required if no cve)
cve	string	no	CVE ID (required if no actor)

Human-readable analyst brief: BLUF, key judgments, and ICD-203 confidence assessment for a threat actor, optionally scoped to a sector. Same fan-out data as /ot/report but synthesised into a short decision-ready brief instead of a full report. Price: $0.12 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payl

Parameter	Type	Required	Notes
actor	string	yes	ICS threat actor name e.g. SANDWORM, VOLTZITE, XENOTIME
sector	string	no	Optional target sector e.g. energy, water, manufacturing

Counterfactual vendor-swap risk comparison. Runs the same assessment used by /ot/vendor-risk on each vendor and returns the risk-tier delta plus per-vendor summaries, for pre-purchase or migration decisions. Price: $0.20 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
vendor_current	string	yes	Current OT/ICS vendor name e.g. Siemens
vendor_proposed	string	yes	Proposed replacement vendor name e.g. Schneider Electric
product_current	string	no	Optional current product line e.g. SIMATIC
product_proposed	string	no	Optional proposed product line e.g. Modicon

Submit an anonymized IOC/TTP sighting observed in the caller's own OT environment. Feeds the correlation corpus without storing an org identifier. Written to a separate sightings store, not intel.db. Price: $0.05 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
ioc_or_ttp_id	string	yes	CVE ID, MITRE ATT&CK-for-ICS technique ID, or sha256 hash
sector	string	yes	Sector where this was observed e.g. energy, water
region	string	yes	Region where this was observed e.g. KSA, UAE
actor_name	string	no	Optional actor name if the sighting is attributed
observed_at	string	no	Optional ISO 8601 timestamp of observation

Recurring public 'State of OT Threat Intel — GCC' sitrep, human-reviewed before publish, sourced from the same intel.db pipeline as /ot/sitrep. Price: $0.01 USDC per call via x402 on Base mainnet. An unpaid call returns an x402 PaymentRequired challenge; retry the identical call with the signed payload in _meta["x402/payment"].

Parameter	Type	Required	Notes
issue_date	string	no	Optional YYYY-MM-DD of a past edition; defaults to latest reviewed edition

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install OT Intel API or to call it, at any volume.

ATool-list grade · score 93 / 100

Release 2.0.0 · scanned 28 Oct 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score93

Findings0 threat · 1 capability

Capabilitymoderate

Coveragemanifest

Verificationnot in this report

Surface digest271690cb8fe35e4178094d3199e3a3802a61c5bad54dc88a8d29e787010c6041

Score vectorthreat 100 → client 93

Term	Level	What it prices	Points
capability-exposure	moderate	capability blast radius (moderate) — client exposure if the model is manipulated	−3
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.

Tool	Capability tags	Why the tag was assigned
getCveTriage	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getDeviceExposure	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getThreatActor	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getActorsBySector	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getIocEnrichment	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getAdvisories	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getPatchFeasibility	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getAssetExposure	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getCampaigns	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getSectorDelta	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getMalwareProfile	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getSectorBrief	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getAsnProfile	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getDetectionArtifacts	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getComplianceMapping	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getComplianceBatch	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getThreatScore	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getPrecursorTtp	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getRootCauseLocalization	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getThreatHuntControlLoop	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getInvariantReachability	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getVendorRisk	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getRiskExposure	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getActionConformance	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getAiExposure	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getAiUplift	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getAiAttackFeasibility	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getClaimReliability	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getStixCoverage	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getMitigationMap	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getActorReport	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getActorDossier	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getSectorSitrep	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getCtiArticle	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getLinkedinPost	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getXThread	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getAnalystBrief	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
getVendorRiskDelta	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
submitSighting	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
getGccBulletin	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

flow-1

Untrusted input can drive an external action even though no sensitive source is exposed.

Supply chain and provenance

Integrityfirst-seen

Surface digest271690cb8fe35e41

Scanned2026-10-28

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.

Where are you running it?

Tool surface

Release history

OT Intel API MCP

What it does

Quickstart

Where are you running it?

Tool surface

What counts against your monthly calls

What the scan could actually read

Capability — what it could do if the model were manipulated

Toxic-flow graph

Supply chain and provenance

Release history

See also