For builders

APIs, MCP & Threat Intel for Builders

Integrate IOCs and curated security signal into your tooling. Use the ThreatNoir MCP server for AI workflows, or the REST API for automation.

Open Developer Portal → View OpenAPI spec →

What you’ll find

Developer portal

MCP server + API key setup + copy/paste examples.

Search and operationalize IOCs from approved sources.

Curated articles to power enrichment and triage workflows.

Daily briefing as a fast “what changed?” input stream.

Start with this

Latest approved article (great sample input for your pipelines).

Browse feed →

Fake ChatGPT Desktop App Ads Used to Push Password-Stealing Malware

Fake ChatGPT desktop app ads pushed password-stealing malware by abusing trusted AI links, hiding from scanners, and tricking users into downloads.