INDIVIDUAL MCP TOOL

get_actor

Profile a threat actor by name or alias: suspected origin, motivation, targeted sectors and countries, aliases, exploited CVEs, tooling, and the coverage indexed here.

mlab.shnone authenticationAvailability not checked

LIVE ENDPOINT

https://news.mlab.sh/mcp

No auth detected

Connect to this endpoint to inspect the live schema for get_actor and invoke it with your own arguments.

Indexed input schema

{}

Risk classification

Inferred read-only · medium confidence · heuristic, not a guarantee.

No write-capable action terms were found; this is not proof that invocation has no side effects.

Parent server

mlab.sh

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.news-mlab-sh]
url = "https://news.mlab.sh/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "news-mlab-sh": {
      "type": "http",
      "url": "https://news.mlab.sh/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: news-mlab-sh
Remote MCP URL: https://news.mlab.sh/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "news-mlab-sh": {
      "url": "https://news.mlab.sh/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "news-mlab-sh": {
      "type": "http",
      "url": "https://news.mlab.sh/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "news-mlab-sh",
  "transport": "streamable-http",
  "url": "https://news.mlab.sh/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

Related tools

search_news — Search the cyber security news index: breaches, vulnerabilities, malware, threat-actor activity and policy, aggregated from ~18 sources and enriched with structured entities.
get_article — Fetch one article in full by its id, as returned by search_news: the enriched write-up, every extracted entity, and the link to the original publication.
get_cve — Look up a vulnerability: CVSS score and vector, EPSS, whether it is in the CISA or EU known-exploited catalogues, its weaknesses, the threat actors known to exploit it, and the coverage indexed here.
list_french_breaches — Data breaches affecting French companies and citizens, published by FrenchBreaches and redistributed here.
get_digest — The editorial digest of recent cyber security activity, written daily and weekly from the indexed corpus.
get_threat_landscape — What is being attacked and by whom right now: the most active threat actors, most-referenced vulnerabilities, targeted sectors and countries over a recent window.