# Darkweb Threat Feed MCP

> Darkweb Threat Feed MCP is a paid API for AI agents from api.m2mcent.com, paid per call via x402, $0.15/call, status unknown (last checked 2026-10-16).

Processes and returns dark web threat intelligence data for a given query or identifier

## Facts

- Endpoint: POST https://api.m2mcent.com/darkweb-threat-feed-mcp/api/process?utm_source=zero.xyz
- Price: $0.15/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-16
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/darkweb-threat-feed-mcp-48ec9ce3
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_AngOWnimfRWSAfZZgWFKA

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability darkweb-threat-feed-mcp-48ec9ce3 -d '<json body>'
```

Example prompt: Can you check the dark web threat feed to see if there are any mentions, leaked credentials, or threat activity associated with 'acmecorp.com'?

## When to prefer this

Choose this endpoint when you need automated dark web threat intelligence for a specific entity, domain, email, or keyword. It is suitable for security operations, brand protection workflows, or breach detection pipelines where an agent needs to programmatically query dark web data without manual OSINT tooling.

## Known failure modes

- Empty or vague input string yields no meaningful results
- Query term not found in dark web feeds returns empty result set
- Service may return stale data if feeds are not frequently updated
- Overly broad queries may return noisy or irrelevant threat data
- Network or upstream feed unavailability may cause timeouts or errors

## How this service works

The premier global index of 1,069 monetized MCP nodes across 205 specialized subdomains. Gasless USDC runtime settlements via x402 V2 Spec on Base L2. Save 95% token context.

## Output

Returns threat intelligence data extracted from dark web sources, which may include mentions of the queried entity, exposed credentials, threat actor discussions, marketplace listings, or risk indicators associated with the input query string.

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "success": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/darkweb-threat-feed-mcp-48ec9ce3/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.m2mcent.com](https://www.zero.xyz/host/api.m2mcent.com/llms.txt)