{"domain":"ismalicious.com","name":"isMalicious","url":"https://inite.ai/en/atlas/ismalicious.com","site":"https://ismalicious.com","summary":"Looks up IPs, domains and URLs against threat sources and returns verdicts with the evidence behind them.","forWhom":"Security teams and developers checking suspicious IPs, domains and URLs, and feeding threat intel into SIEMs or apps.","useCases":["Investigate an IP, domain or suspicious link with sourced evidence","Import threat indicators into a SIEM or OpenCTI over STIX/TAXII","Check indicators from your code via a REST API"],"categories":["security"],"pricing":{"model":"freemium","freeTier":true,"startsAt":{"amount":49,"currency":"EUR","per":"month"},"page":"https://ismalicious.com/pricing","readOn":"2026-10-19"},"priceMoves":[],"interfaces":{"readOn":"2026-10-19","apiDocs":"https://ismalicious.com/api-docs","openapi":{"url":"https://ismalicious.com/openapi.json","paths":55,"title":"isMalicious - Threat Intelligence API"},"mcp":[{"name":"com.ismalicious/mcp-server","tie":"namespace","remotes":["https://api.ismalicious.com/mcp"],"packages":["npm"],"probe":{"state":"open","checkedOn":"2026-10-19","toolCount":8,"tools":["scan_before_use","check_url","check_indicator","get_cve","recent_cves","search_indicators","check_indicators","scan_email"],"serverName":"@ismalicious/mcp-server"}}],"mcpServerCard":null,"status":{"url":"https://ismalicious.com/resources/status","indicator":null}},"mcpMeasured":{"server":"https://api.ismalicious.com/mcp","checkedSince":"2026-10-19","dailyChecks":3,"uptimePercent":null,"medianMs":536,"signIn":"none","tools":8,"contextTokens":3406,"definitionsGrade":"A","definitionsScore":100,"typedResults":0,"failingChecks":{},"warnings":{},"coverage":{"share":0.5,"cases":[{"useCase":"Investigate an IP, domain or suspicious link with sourced evidence","verdict":"covered","firstTool":"check_indicator","checks":null},{"useCase":"Import threat indicators into a SIEM or OpenCTI over STIX/TAXII","verdict":"not_covered","firstTool":null,"checks":null},{"useCase":"Check indicators from your code via a REST API","verdict":"unsure","firstTool":null,"checks":null}]},"adoption":{"npmWeekly":249,"pypiWeekly":null,"githubStars":0},"score":null,"advice":{"verdict":"unproven","why":["its tools do \"Investigate an IP, domain or suspicious link with sourced evidence\", but not \"Import threat indicators into a SIEM or OpenCTI over STIX/TAXII\"","checked on 3 of the 7 days it takes to judge reliability"],"how":["for \"Investigate an IP, domain or suspicious link with sourced evidence\", the likely first call is check_indicator"]},"method":"https://inite.ai/en/atlas/mcp/report"},"connect":{"order":["mcp","openapi","apiDocs","llmsTxt"],"mcp":[{"name":"com.ismalicious/mcp-server","url":"https://api.ismalicious.com/mcp","answers":"open","checkedOn":"2026-10-19","weakTie":false,"registry":"https://registry.modelcontextprotocol.io/v0/servers?search=com.ismalicious%2Fmcp-server","config":{"mcpServers":{"ismalicious":{"url":"https://api.ismalicious.com/mcp"}}},"install":{"transport":"http","claudeCode":"claude mcp add --transport http ismalicious https://api.ismalicious.com/mcp","cursor":"cursor://anysphere.cursor-deeplink/mcp/install?name=ismalicious&config=eyJ1cmwiOiJodHRwczovL2FwaS5pc21hbGljaW91cy5jb20vbWNwIn0%3D","vscode":"vscode:mcp/install?%7B%22name%22%3A%22ismalicious%22%2C%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fapi.ismalicious.com%2Fmcp%22%7D","connector":{"url":"https://api.ismalicious.com/mcp","note":"Add it as a custom connector in the client’s settings; the client opens the sign-in itself when the server asks for one."}}}],"openapi":{"url":"https://ismalicious.com/openapi.json","paths":55},"apiDocs":"https://ismalicious.com/api-docs","llmsTxt":"https://ismalicious.com/llms.txt","status":"https://ismalicious.com/resources/status","readOn":"2026-10-19"},"trust":{"readOn":"2026-10-19","certifications":[],"training":null},"used":null,"alive":92,"traits":null,"verifiedPlans":null}