honeylabshq/honeylabs-mcp

What it does

HoneyLabs MCP is a threat intelligence service that provides AI agents with access to real-time and historical data from a distributed honeypot sensor network. It delivers actionable intelligence on network reconnaissance activities, including IP reputation scoring, attacker classification, CVE probing patterns, and cryptographic fingerprinting techniques (JA4, JA4H, HASSH).

How to set up

As an MCP (Model Context Protocol) server, integration typically involves: 1) Obtaining API credentials from HoneyLabs, 2) Configuring your MCP client to connect to the remote server endpoint, 3) Authenticating with your credentials, 4) Testing connection with sample queries. Detailed setup instructions are available in the GitHub repository documentation.

Key features

• 90 days of historical probe data from active sensor network
• IP reputation and geolocation data
• Automated scanner and bot classification
• CVE exploitation trend analysis
• JA4, JA4H, and HASSH fingerprint matching
• Free tier available for testing
• Remote MCP server (cloud-based)
• Python-based implementation