# Anomali ThreatStream MCP Server

**Canonical:** https://apis.io/apis/anomali/anomali-threatstream-mcp-server/  
**Provider:** Anomali — https://apis.io/providers/anomali/  
**Base URL:** https://api.threatstream.com/mcp  
**Documentation:** https://docs.anomali.com/Content/ThreatStream%20API/introduction_api.htm

Anomali ThreatStream MCP Server is one of 3 APIs that [Anomali](https://apis.io/providers/anomali/) publishes on the [APIs.io](https://apis.io/) network.

Remote Model Context Protocol server for ThreatStream at https://api.threatstream.com/mcp. Its OAuth protected-resource metadata (/.well-known/oauth-protected-resource) names the resource "ThreatStream MCP Server" and scopes MCP_READ_TS_DATA, MCP_WRITE_TS_DATA, MCP_READ_PIR_DATA, MCP_WRITE_PIR_DATA, MCP_ENRICHMENTS_ACCESS and MCP_SA_ACCESS; anonymous tools/list returns 401 (WWW-Authenticate ApiKey realm="MCP").

## Machine-readable artifacts (1)

- **MCPServer** — https://raw.githubusercontent.com/api-evangelist/anomali/refs/heads/main/mcp/anomali-mcp.yml

## Other Anomali APIs (2)

- [Anomali ThreatStream API](https://apis.io/apis/anomali/anomali-threatstream-api/)
- [Anomali API](https://apis.io/apis/anomali/anomali-api/)

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/anomali/anomali-threatstream-mcp-server/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/anomali/.