What is the key difference between BlackDome Threat Intel and Sanity?

BlackDome Threat Intel belongs to the Developer Tools category with local stdio execution, while Sanity belongs to the Developer Tools category with local stdio execution.

How do I install BlackDome Threat Intel or Sanity in Claude Desktop or Cursor?

Copy the mcpServers JSON configuration snippet provided on this page into your claude_desktop_config.json or ~/.cursor/mcp.json file and restart your AI client.

Are BlackDome Threat Intel and Sanity free or paid?

BlackDome Threat Intel operates under a Free / Open Source model (No auth required). Sanity operates under a Free / Open Source model (No auth required).

Which MCP server has more tools and community activity?

BlackDome Threat Intel lists 20 tools with 0 views and 0 GitHub stars. Sanity lists 8 tools with 0 views and 182 GitHub stars.

Can I use both BlackDome Threat Intel and Sanity together in the same MCP host?

Yes! MCP hosts like Claude Desktop, Cursor, Windsurf, Cline, and VS Code support configuring multiple servers under the mcpServers object simultaneously.

Side-by-Side Model Context Protocol Comparison

BlackDome Threat Intel vs Sanity

In-depth architectural comparison of the BlackDome Threat Intel and Sanity MCP servers. Compare execution transports, security boundaries, tool capabilities, quality scores, and ready-to-paste client installation snippets for Claude, Cursor, Windsurf, and VS Code.

At a Glance & Executive Verdict

BlackDome Threat Intel

Developer Tools · Local stdio

Quality: 48/100 (Fair) | Auth: No auth required

Sanity

Developer Tools · Local stdio

Quality: 57/100 (Good) | Auth: No auth required

Verdict Summary: Choose BlackDome Threat Intel if you need specialized Developer Tools tools running via a local process. Choose Sanity if your workspace requires Developer Tools integration with local subprocess execution. Both servers can be configured concurrently in your client's mcpServers manifest.

Which MCP Server Should You Choose?

Choose BlackDome Threat Intel when:

You need dedicated capabilities in the Developer Tools domain.
You prefer local stdio subprocess transport architecture.
Your security boundary fits: No auth required (Free / Open Source).
Primary tools included: lookup_attacker_ip, top_attackers, attack_map.

Explore BlackDome Threat Intel Details

Choose Sanity when:

You need dedicated capabilities in the Developer Tools domain.
You prefer local stdio subprocess transport architecture.
Your security boundary fits: No auth required (Free / Open Source).
Primary tools included: query_documents, create_documents, patch_documents.

Explore Sanity Details

Feature & Specification Comparison

Specification	BlackDome Threat Intel Developer Tools	S Sanity Developer Tools
Summary	Live honeypot threat intel: attacker IPs, IOCs, credentials, payloads, actors.	Direct access to your Sanity projects (content, datasets, releases, schemas) and agent rules
Category & Scope	Developer Tools	Developer Tools
Quality signal

Tools & Capabilities Breakdown

BlackDome Threat Intel Tools (20)

lookup_attacker_ip

Full dossier for one attacker IP — events, protocols, credentials (passwords masked), MITRE, edge nodes

top_attackers

Most active attacker IPs over a window — pick one to drill into

attack_map

Recent geolocated attack events for a live map (limit ≥ 10)

attack_heatmap

Country-aggregated attack heatmap with centroids (limit ≥ 5)

credential_preview

Sample of recent credentials (masked server-side) + teaser totals

verify_sigil

Ready-to-Paste Client Configurations

Paste either (or both) of these JSON server blocks into your client config file (e.g. claude_desktop_config.json or ~/.cursor/mcp.json).

BlackDome Threat Intel Configuration

mcpServers (Claude Desktop / Cursor)

{
  "mcpServers": {
    "blackdome-threat-intel": {
      "command": "uvx",
      "args": [
        "blackdome-mcp"
      ]
    }
  }
}

Sanity Configuration

mcpServers (Claude Desktop / Cursor)

{
  "mcpServers": {
    "sanity": {
      "command": "npx",
      "args": [
        "-y",
        "sanity@latest"
      ]
    }
  }
}

Frequently Asked Questions

BlackDome Threat Intel is categorized under Developer Tools and uses a local stdio subprocess. In contrast, Sanity belongs to Developer Tools using local stdio subprocess. Select BlackDome Threat Intel when you need capabilities focused on developer tools and Sanity when you require tools for developer tools.

More alternatives to BlackDome Threat Intel More alternatives to Sanity Developer Tools category hub