MCP ServerVysion for AI

Query darknet and ransomware intelligence in natural language with AI.

Darknet Intelligence, One Prompt Away

Ask in natural language and let your AI assistant query indexed darknet chatter, clandestine messaging feeds, and ransomware victim data—with every answer traceable to its original source.

From Underground Noise to AI-Driven Investigations

The Vysion MCP Server exposes Vysion's search, investigation, and threat-profiling capabilities as tools MCP-compatible assistants can call—from Mistral Le Chat to Claude Code and Cursor. Explore the integration below and see AI become an active investigation agent.

Discover Vysion

Integrated Threat Intelligence Scope

The Vysion MCP Server gives AI assistants direct, transparent access to darknet networks, clandestine messaging platforms, leak data, and ransomware archives—direct MCP access to the Vysion API tools available.

Darknet & Indexed Deep Web
Search and retrieve threat intelligence documents from Tor (.onion) and deep web sources, including forums and marketplaces, with full source references.
Telegram Ecosystem
Search Telegram messages, channels, and user profiles to surface underground chatter, and tap into real-time Telegram feeds.
Discord Intelligence
Search Discord messages, channels, and user profiles to track mentions, email exposures, and associated wallets.
Ransomware & Victimology
Query ransomware victims and groups, plus statistics and histograms by country, group, and sector to spot targeting trends.
Leaks & Cryptocurrency Wallets
Search leaks by email, wallet, IP, phone, username, or hash, and check whether a crypto address appears within Vysion's indexed leak, document, and IM data.

Capabilities via MCP

Engineered for CTI analysts, threat hunters, and SOC teams who want to investigate in natural language—without learning query syntax or switching between tools.

Natural-Language Queries
Ask in plain language and your assistant picks the right Vysion tools—no query syntax to learn.
Traceable Evidence
Every answer is grounded in original Vysion sources, so findings can be verified—no black-box outputs.
Investigation-Ready Context
Bring darknet, ransomware, leak, and messaging intelligence into AI workflows for faster research and analysis.

Setup & API Access

Connect any MCP-compatible client to the hosted Vysion MCP Server—no local installation required.

View Integration Guide FROM THE BLOGHow to connect Vysion MCP to Mistral Le Chat, step by step

Hosted MCP Server:

Endpoint: https://mcp.vysion.ai/mcp over HTTP transport. Clients: Mistral Le Chat, Claude Code, Cursor, OpenCode, and more.

Bring Your Own Key (BYOK):

Connect your enterprise Vysion API Key as a Bearer token for high-throughput access across all available tools.

Core Use Cases

Threat Actor & Group Research
Investigate groups like LockBit conversationally. Pull documents, Telegram and Discord mentions, and victim history in a single thread, and let the AI cross-reference the evidence into a coherent actor profile.
Credential & Leak Exposure Checks
Ask whether your company's emails, domains, or executives appear in leaks or darknet forums, and get evidence-backed findings with their original sources in seconds.
Ransomware Landscape Briefings
Request on-demand briefings on ransomware activity by sector, country, or group—such as healthcare victims from the last 30 days—and turn Vysion statistics into executive-ready summaries.
AI Agents & Automated Workflows
Embed Vysion intelligence into your own AI agents and copilots through an open standard, automating recurring triage, enrichment, and reporting tasks without custom integrations.