Greynoise
- Updated February 26, 2026
- nickjlucker/mcp-greynoise
Queries the GreyNoise API to tell whether an IP is internet background noise or a targeted attacker, helping triage security alerts.
About
This MCP server wraps the GreyNoise API so an AI assistant can check whether an IP address is opportunistic internet background noise or part of a targeted attack. A solo builder or security engineer reaches for it to quickly triage suspicious IPs in alerts and cut down on false positives. It needs a GreyNoise API key and works with the free community tier at 50 requests per day.
- GreyNoise IP reputation
- Noise vs targeted attack
- Alert triage helper
- Free community tier: 50 req/day
Greynoise by the numbers
- Data as of Jul 7, 2026 (Skillselion catalog sync)
claude mcp add --env GREYNOISE_API_KEY=YOUR_GREYNOISE_API_KEY mcp-greynoise -- npx -y mcp-greynoiseAdd your badge
Show developers this MCP server is listed on Skillselion. Paste this into your README.
| Package | mcp-greynoise |
|---|---|
| Transport | STDIO |
| Auth | Required |
| Last updated | February 26, 2026 |
| Repository | nickjlucker/mcp-greynoise ↗ |
What it does
Queries the GreyNoise API to tell whether an IP is internet background noise or a targeted attacker, helping triage security alerts.
Who is it for?
triaging suspicious IPs in security alerts
Skip if: non-security use cases
What you get
- ip reputation checks
- noise vs targeted classification
Recommended MCP Servers
1Claw VaultHSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.2
1passwordMCP server for 1Password service accounts — tools and resources for vaults and credentials18
402sentinel McpAssess an x402 counterparty's risk BEFORE paying: allow/review/block, scored on-chain (Base).1
A2adependencyinspector McpRemote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi
A2a Governance Bridge McpA2A Governance Bridge MCP server.A2aidentitytoll McpRemote MCP for A2A caller identity, scope policy, verdict receipts, and audit history.