TweetFeed for AI Agents

---

All three: free, no authentication, no rate limit for normal use, same IOC data.

---

Connect

MCP server

Remote Model Context Protocol server over HTTP JSON-RPC 2.0 (protocolVersion 2025-11-25). Works with Claude Desktop, Claude Code, ChatGPT, Cursor, Zed and any SDK-based MCP client.

Config for Claude Desktop, Cursor, Zed

{
  "mcpServers": {
    "tweetfeed": {
      "url": "https://mcp.tweetfeed.live/"
    }
  }
} 

ChatGPT (connectors and deep research)

1. In ChatGPT, go to Settings, Connectors, Create (or add a custom connector from Deep research).
2. Paste https://mcp.tweetfeed.live/. No authentication needed.
3. Ask a question. Every result carries a tweetfeed.live URL, so answers cite the feed.

The server exposes the search and fetch tools ChatGPT requires, alongside the typed tools below.

Or add from the Claude Code CLI

claude mcp add --transport http tweetfeed https://mcp.tweetfeed.live/ 

Available tools

The tools above stay the filtered, size-bounded path. The server also exposes:

• MCP resources: tweetfeed://status, tweetfeed://iocs/{time}/{type}, tweetfeed://campaigns/{id} and more.
• Read them with resources/read: raw JSON of the matching document.
• Three prompts (triage_ioc, daily_brief, campaign_summary): slash commands in Claude Desktop and Claude Code that chain the tools.

Try it from the command line

curl -sX POST https://mcp.tweetfeed.live/ \
  -H 'content-type: application/json' \
  -d '{"jsonrpc":"2.0","method":"tools/list","id":1}' 

Source: github.com/0xDanielLopez/tweetfeed-mcp  ·  Server card: /.well-known/mcp/server-card.json

Agent Skills

For agents that consume Agent Skills Discovery (RFC v0.2.0) instructions instead of MCP tools. Each skill is a markdown file describing how to call the feed.

Discovery index: /.well-known/agent-skills/index.json  (includes sha256 content digest for integrity).

REST API

No MCP or skills harness? Call the public REST API directly: no key, no auth, CORS-enabled, JSON responses.

GET https://api.tweetfeed.live/v1/{time}/{filter1}/{filter2} 

The API page is the reference: every parameter, the 10,000-row result cap and its truncation headers, conditional requests, and the campaigns, counts, trends and IOC-lookup endpoints.

---

Bulk data and discovery

For platforms that ingest files on a schedule instead of calling a tool per question.

Bulk data formats

Static bundles for SIEM/Threat Intelligence platforms and incremental sync. All regenerated every 15 minutes from the same pipeline that feeds the API and MCP server.

Discovery endpoints

Crawlers and agents can discover every integration from a single HEAD https://tweetfeed.live/: the Link header carries rel="api-catalog", rel="agent-skills", rel="mcp-server", rel="service-doc" and rel="service-desc" (RFC 8288).

---

License

IOC data (feed rows, API responses, MCP tool outputs) is freely available; see the Terms of Service for license. No attribution required, no warranty.  Source code for the MCP server: tweetfeed-mcp (MIT).