Home / Servers / Cloudflare API / search_threat_intelligence

Search threat intelligence

An MCP tool from the Cloudflare API server, hosted on mcp.hjlabs.in.

Search threat intelligence Searches the articles, actors, tags, events, and indicators you can read and returns one list of… [POST /accounts/{account_id}/cloudforce-one/v2/search]

Name on the gateway: cloudflare_api__search_threat_intelligence · may change things.

Parameters

NameTypeDescription
account_id requiredstringaccount_id parameter
entity_typesarrayEntity types to search. Omit to search articles…
include_analytics_datasetsbooleanWhether to include Event and Indicator matches…
limitintegerMaximum number of results to return. Defaults to…
query requiredstringSearch text, from 1 to 1000 characters after…

How to call it

Through the Smart Gateway, any client can run it by name with call_tool, or let the gateway find it with search_tools:

call_tool arguments
{
  "name": "cloudflare_api__search_threat_intelligence",
  "arguments": {
    "account_id": "…",
    "query": "…"
  }
}

Or connect the Cloudflare API server directly, which lists 3,127 tools including this one:

Run in your terminal
claude mcp add --transport http hj-cloudflare-api https://mcp.hjlabs.in/mcp/cloudflare-api \
  --header "Authorization: Bearer YOUR_API_KEY"

Try asking

Use the search threat intelligence tool with account_id set to ….

More from Cloudflare API