DugganUSA CLI — Local STDIO MCP

pduggusa/dugganusa-cli

A read-only STDIO server that wires 1.13M threat intelligence indicators into Claude Desktop, Cursor, or any MCP client. You get three tools: full-text search across 17.9M documents spanning IOCs, CISA KEV, adversary profiles, and 40+ threat indexes; IP enrichment with geolocation, ASN, and cross-index correlation; and STIX feed metadata. No filesystem writes, no exec calls, no third-party SDK dependencies. The same two-person Minnesota outfit that named TeamPCP 45 days before CISA and called NGINX-UI exploitation 20 days early. Built for CI pipelines that need to fail on known-bad indicators before deployment, now accessible as conversational tooling. Optional local policy gate if you need stricter controls than the default allow-all stance.

GitHub stars

2

tools

3

auth

Secret needed

transport

STDIO

env var

1

last updated

May 11, 2026

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language