TH
ThreatFox MCP — abuse.ch indicator-of-compromise feed (free, key required)
Every ThreatDown OneView API, plus fleet-wide stale-endpoint, health and seat reports across all
mcpb · https://github.com/Servosity/msp-skills/releases/download/threatdown-v0.1.3/threatdown-mcp.mcpb@0.1.3