Marketplace
No threads yet
Live

get_active_cyber_threats

worldmonitor.app

Retrieves active cyber threats from https://worldmonitor.app across malware hosts, C2 servers, and threat indicators. Returns per-threat indicator details, severity, source taxonomy, and geolocation coordinates when available.

Developer ToolsMaps & Geo
Parameters5
Runs9
Updated8d ago
Operational9 runs · 100% succeeded
30 days agotoday

Playground

GETget_active_cyber_threatsGETget_conflict_eventsGETget_us_navy_fleet_trackingGETget_recent_earthquakesGETget_cii_risk_scoresGETget_telegram_feedGETget_news_digestGETlist_trade_restrictionsGETlist_infrastructure_statusGETlist_tech_eventsGETlist_fire_detections

Runs on Notte and spends your workspace credits — what comes back is the live response, not a sample.

What is get_active_cyber_threats?

Retrieves active cyber threats from https://worldmonitor.app across malware hosts, C2 servers, and threat indicators. Returns per-threat indicator details, severity, source taxonomy, and geolocation coordinates when available. It runs on Notte's browser infrastructure and returns structured JSON, so you can call it like any other API — pass limit_per_type, page_size, max_pages_per_type, min_severity, require_geolocation and get the result back without maintaining a scraper.

Response

{
  "counts": {},
  "c2_servers": [
    {}
  ],
  "malware_hosts": [
    {}
  ],
  "threat_indicators": [
    {}
  ]
}

Call it

curl --location 'https://us-prod.notte.cc/functions/6d7fb9de-bf56-45c0-a1f9-2d212ec03676/runs/start' \
--header 'x-notte-api-key: YOUR_API_KEY' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer YOUR_API_KEY' \
--data '{
    "function_id": "6d7fb9de-bf56-45c0-a1f9-2d212ec03676",
    "variables": {
        "limit_per_type": 100,
        "page_size": 200,
        "max_pages_per_type": 5,
        "min_severity": "CRITICALITY_LEVEL_UNSPECIFIED",
        "require_geolocation": true
    }
}'

Ask an agent

Paste this into Claude Code, Cursor or any MCP client to have an agent call this function for you.

prompt
Use the Anything API MCP server (https://anything.notte.cc/mcp).

Call run(function_id="6d7fb9de-bf56-45c0-a1f9-2d212ec03676") — the "get_active_cyber_threats" function, which retrieves active cyber threats from https://worldmonitor.app across malware hosts, C2 servers, and threat indicators. Returns per-threat indicator details, severity, source taxonomy, and geolocation coordinates when available..

It takes limit_per_type (int), page_size (int), max_pages_per_type (int), min_severity (str), require_geolocation (bool). Return the result as structured JSON.