%20--%3e%3cdefs%3e%3cstyle%3e%20.st0%20{%20fill:%20%23061b40;%20}%20.st1%20{%20fill:%20%23306af1;%20}%20.st2%20{%20fill:%20%235ce5cf;%20}%20%3c/style%3e%3c/defs%3e%3cg%3e%3cpath%20class='st0'%20d='M55,10.5h9v3h-9v9h12V7.5h-12v3ZM64,19.5h-6v-3h6v3Z'/%3e%3cpolygon%20class='st0'%20points='69%2016.5%2078%2016.5%2078%2019.5%2069%2019.5%2069%2022.5%2081%2022.5%2081%2013.5%2072%2013.5%2072%2010.5%2081%2010.5%2081%207.5%2069%207.5%2069%2016.5'/%3e%3cpolygon%20class='st0'%20points='95%2010.5%2095%207.5%2083%207.5%2083%2022.5%2095%2022.5%2095%2019.5%2086%2019.5%2086%2016.5%2095%2016.5%2095%2013.5%2086%2013.5%2086%2010.5%2095%2010.5'/%3e%3cpath%20class='st0'%20d='M40,1.5v21h11.6l1.4-1.4v-7.6h0c0,0-1.4-1.5-1.4-1.5l1.4-1.4V2.9l-1.4-1.4h-11.6ZM50,19.5h-7v-6h7v6ZM50,10.5h-7v-6h7v6Z'/%3e%3c/g%3e%3cpath%20class='st1'%20d='M23.1,24L14.7,4.8l-4.9,11.2h3.8l-1.8,4H3.3L12.1,0H2C.9,0,0,.9,0,2v20c0,1.1.9,2,2,2h21.1Z'/%3e%3cpath%20class='st2'%20d='M34,0h-16.8l10.6,24h6.2c1.1,0,2-.9,2-2V2C36,.9,35.1,0,34,0ZM32.5,20h-4V4h4v16Z'/%3e%3c/svg%3e)
Ransomwarelive MCP Server
This is an MCP server project that interfaces with the ransomware.live API, allowing users to analyze ransomware-related data and gain insights through LLM/MCP clients. The project provides a variety of tools to query victim information, details of ransomware organizations, etc., and supports use in development and production environments.
rating : 2 points
downloads : 7.2K
What is the Ransomware Live MCP Server?
This is an MCP server specifically designed to connect to the ransomware.live API. It allows users to access and analyze ransomware-related data through various LLM/MCP clients. The server provides a variety of tools to query key information such as victim organizations, ransomware gangs, and industry distributions.How to use the Ransomware Live MCP Server?
You can start the server via a simple command line and then connect using any compatible MCP client. The server offers multiple query tools to obtain specific data, such as filtering victim information by industry, country, or time period.Applicable scenarios
Suitable for cybersecurity analysts, threat intelligence researchers, and enterprise security teams to track ransomware attack trends, analyze specific gang activities, or assess industry risks.Main features
Get recent victims
Query detailed information on the latest 100 victims attacked by ransomware gangs.
Industry analysis
Count the number of victims by industry category to identify high-risk industries.
Gang analysis
Query the activities and victim information of specific ransomware gangs.
Geographical analysis
Filter victims by country code to analyze geographical distribution.
Temporal analysis
Query victim information by year or month to analyze attack trends.
Advantages
Provide real-time ransomware attack data
Support multiple query dimensions (time, location, industry, etc.)
Can be integrated with various LLM/MCP clients
Authoritative data source (ransomware.live)
Limitations
Dependent on the data update of the ransomware.live API
Basic command-line knowledge is required for configuration
Some advanced analyses may require additional processing
How to use
Install the server
Ensure that Python and the uv tool are installed, and then run the installation command.
%20--%3e%3cdefs%3e%3cstyle%3e%20.st0%20{%20fill:%20%230080ff;%20}%20%3c/style%3e%3c/defs%3e%3cpath%20class='st0'%20d='M16.2,11.1c.4.5.4,1.2,0,1.8l-4.7,7.1h-3.8l5.3-8L7.6,4h3.8l4.7,7.1Z'/%3e%3c/svg%3e)
Start the server
Use the following command to start the MCP server.
Connect the client
Use your preferred MCP client (such as the Claude desktop version) to connect to the server.
Execute queries
Send query requests through the client, such as getting recent victims or analyzing data by industry.
Usage examples
Analyze recent ransomware attack trends
The security team wants to understand the main targets and industry distributions of recent ransomware attacks.
Assess risks in a specific industry
A financial institution wants to assess the level of ransomware threats faced by its industry.
Track the activities of a specific ransomware gang
Researchers want to track the latest activities of the Conti ransomware gang.
Frequently Asked Questions
How often is the data updated?
Do I need programming knowledge to use it?
Which MCP clients are supported?
Is the data complete?
Related resources
ransomware.live official website
Homepage of the data source project
MCP protocol documentation
Official documentation of the Model Context Protocol
Claude desktop version
One of the compatible MCP clients
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
29.0K
5 points
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
55.4K
4.3 points
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
17.9K
4.3 points
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
17.8K
4.5 points
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
53.1K
4.5 points
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
23.9K
5 points
Minimax MCP Server
The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.
Python
36.2K
4.8 points
Gmail MCP Server
A Gmail automatic authentication MCP server designed for Claude Desktop, supporting Gmail management through natural language interaction, including complete functions such as sending emails, label management, and batch operations.
TypeScript
18.6K
4.5 points