honeylabs

HoneyLabs MCP gives AI agents direct access to real honeypot telemetry. Unlike static threat feeds, this data comes from production sensors actively being attacked right now. Use it to look up whether an IP has been seen attacking infrastructure, understand what ports and protocols attackers are targeting, find exploitation attempts for specific CVEs, search raw payloads for attacker tooling signatures, and track attack volume over time. Data spans 13M+ events collected since February 2026 across multiple sensors.

How to connect

https://server.smithery.ai/info-lboa/honeylabs/mcp

curl -X POST https://server.smithery.ai/info-lboa/honeylabs/mcp \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{}}'