Security & Testing

mlab.sh

Mlab is an IOC and file intelligence platform for security teams to analyze IPs, domains, hashes, and suspicious files for threat detection and risk assessment.

WebMCP3 endpoints7 known toolsFirst detected September 1, 2026Last detected September 8, 2026

ENDPOINT 1

https://mlab.sh/mcp

Auth required

Known tools 0

No tool metadata was available in the registry cache.

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.mlab-sh]
url = "https://mlab.sh/mcp"
enabled = true
bearer_token_env_var = "MCP_BEARER_TOKEN"

Authentication is required. Replace the placeholder locally and never commit a secret.

Claude Code

.mcp.json

{
  "mcpServers": {
    "mlab-sh": {
      "type": "http",
      "url": "https://mlab.sh/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_BEARER_TOKEN"
      }
    }
  }
}

Authentication is required. Replace the placeholder locally and never commit a secret.

Claude Desktop

Settings → Connectors → Add custom connector

Name: mlab-sh
Remote MCP URL: https://mlab.sh/mcp

Add the URL as a custom connector, then complete its supported authorization flow. Claude Desktop remote connectors are configured in the UI.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "mlab-sh": {
      "url": "https://mlab.sh/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_BEARER_TOKEN"
      }
    }
  }
}

Authentication is required. Replace the placeholder locally and never commit a secret.

Visual Studio Code

.vscode/mcp.json

{
  "servers": {
    "mlab-sh": {
      "type": "http",
      "url": "https://mlab.sh/mcp",
      "headers": {
        "Authorization": "Bearer ${input:mcp-token}"
      }
    }
  },
  "inputs": [
    {
      "type": "promptString",
      "id": "mcp-token",
      "description": "mlab-sh bearer token",
      "password": true
    }
  ]
}

Authentication is required. Replace the placeholder locally and never commit a secret.

Generic MCP

Client-specific MCP configuration

{
  "name": "mlab-sh",
  "transport": "streamable-http",
  "url": "https://mlab.sh/mcp",
  "headers": {
    "Authorization": "Bearer YOUR_BEARER_TOKEN"
  }
}

Authentication is required. Replace the placeholder locally and never commit a secret.

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

ENDPOINT 2

https://mlab.sh

No auth detected

MCP server metadata

Name: WebMCP

Capabilities

imperative

Known tools 0

No tool metadata was available in the registry cache.

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.webmcp]
url = "https://mlab.sh"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "webmcp": {
      "type": "http",
      "url": "https://mlab.sh"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: webmcp
Remote MCP URL: https://mlab.sh

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "webmcp": {
      "url": "https://mlab.sh"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "webmcp": {
      "type": "http",
      "url": "https://mlab.sh"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "webmcp",
  "transport": "streamable-http",
  "url": "https://mlab.sh"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

ENDPOINT 3

https://news.mlab.sh/mcp

No auth detected

MCP server metadata

Name: news.mlab.sh
Version: 2.0.0

Capabilities

tools

Known tools 7

search_news

Search the cyber security news index: breaches, vulnerabilities, malware, threat-actor activity and policy, aggregated from ~18 sources and enriched with structured entities.

Inferred read-only

get_article

Fetch one article in full by its id, as returned by search_news: the enriched write-up, every extracted entity, and the link to the original publication.

Potential side effects

get_cve

Look up a vulnerability: CVSS score and vector, EPSS, whether it is in the CISA or EU known-exploited catalogues, its weaknesses, the threat actors known to exploit it, and the coverage indexed here.

Inferred read-only

get_actor

Profile a threat actor by name or alias: suspected origin, motivation, targeted sectors and countries, aliases, exploited CVEs, tooling, and the coverage indexed here.

Inferred read-only

list_french_breaches

Data breaches affecting French companies and citizens, published by FrenchBreaches and redistributed here.

Inferred read-only

get_digest

The editorial digest of recent cyber security activity, written daily and weekly from the indexed corpus.

Inferred read-only

get_threat_landscape

What is being attacked and by whom right now: the most active threat actors, most-referenced vulnerabilities, targeted sectors and countries over a recent window.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.news-mlab-sh]
url = "https://news.mlab.sh/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "news-mlab-sh": {
      "type": "http",
      "url": "https://news.mlab.sh/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: news-mlab-sh
Remote MCP URL: https://news.mlab.sh/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "news-mlab-sh": {
      "url": "https://news.mlab.sh/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "news-mlab-sh": {
      "type": "http",
      "url": "https://news.mlab.sh/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "news-mlab-sh",
  "transport": "streamable-http",
  "url": "https://news.mlab.sh/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.