DarkWebSonar
Claude connectorCommunityAsk Claude about ransomware groups, leak-site posts, and threat actors, answered from DarkWebSonar's live dark-web intelligence.
- Tools
- 10
exposed by this connector
Movement
From our daily snapshots over the last 30 days.
Rank by popularity
Not enough data points to chart.
Rank by trending score
Popularity score
Not enough data points to chart.
Trending score
In its categories
How this connector compares with others in the same category. Positions are counted within the category, not across the whole directory.
Productivity2,478th of 2,878 by popularity · not ranked by trending score
| # | Connector | Popularity | Trending | 7d |
|---|---|---|---|---|
| 2475 | 2,000 | 805places down | ||
| 2476 | 2,000 | 901places down | ||
| 2477 | 2,000 | 520places down | ||
| 2478 | 2,000 | — | ||
| 2479 | 2,000 | 520places down | ||
| 2480 | 2,000 | — | ||
| 2481 | 2,000 | 683places down |
This connector isn’t ranked by trending score, so the category’s top connectors are shown instead.
| # | Connector | Trending | Popularity | 7d |
|---|---|---|---|---|
| 1 | 9,228,791 | — | ||
| 2 | 7,900,707 | — | ||
| 3 | 7,899,876 | — | ||
| 4 | 7,142,519 | — | ||
| 5 | 2,723,126 | — | ||
| 6 | 1,876,181 | 7places down | ||
| 7 | 1,768,295 | — |
Developer tools847th of 952 by popularity · not ranked by trending score
| # | Connector | Popularity | Trending | 7d |
|---|---|---|---|---|
| 844 | 2,000 | 520places down | ||
| 845 | 2,000 | — | ||
| 846 | 2,000 | 901places down | ||
| 847 | 2,000 | — | ||
| 848 | 2,000 | — | ||
| 849 | 2,000 | — | ||
| 850 | 2,000 | 520places down |
This connector isn’t ranked by trending score, so the category’s top connectors are shown instead.
| # | Connector | Trending | Popularity | 7d |
|---|---|---|---|---|
| 1 | 9,455,328 | — | ||
| 2 | 7,900,707 | — | ||
| 3 | 6,921,593 | — | ||
| 4 | 2,860,633 | — | ||
| 5 | 1,448,559 | 13places down | ||
| 6 | 1,417,310 | 2places down | ||
| 7 | 1,091,230 | 12places up |
Data analytics1,758th of 1,977 by popularity · not ranked by trending score
| # | Connector | Popularity | Trending | 7d |
|---|---|---|---|---|
| 1755 | 2,000 | 805places down | ||
| 1756 | 2,000 | — | ||
| 1757 | 2,000 | — | ||
| 1758 | 2,000 | — | ||
| 1759 | 2,000 | 520places down | ||
| 1760 | 2,000 | 683places down | ||
| 1761 | 2,000 | — |
This connector isn’t ranked by trending score, so the category’s top connectors are shown instead.
| # | Connector | Trending | Popularity | 7d |
|---|---|---|---|---|
| 1 | 9,228,791 | — | ||
| 2 | 7,900,707 | — | ||
| 3 | 7,899,876 | — | ||
| 4 | 6,921,593 | — | ||
| 5 | 2,497,852 | 9places up | ||
| 6 | 1,768,295 | — | ||
| 7 | 1,765,473 | 15places up |
DarkWebSonar brings live dark-web threat intelligence into Claude. Ask in plain language who a ransomware group is targeting, how many leak-site posts hit an industry or country over a rolling window, or whether a client organisation has appeared on a leak site recently. It's built for MSPs and security teams who brief clients on threats.
The connector has 10 read-only tools. They search and profile threat actors, recommend the actors most relevant to an industry and country, count and list leak-site and intelligence entries with filters for victim organisation, site, industry, and country, and map MITRE ATT&CK technique IDs to their names and tactics. Nothing is written back to your account.
You sign in with OAuth and paste your DarkWebSonar API key on our authorization screen, so the key never sits in a config file. The connector is included with the Pro and Enterprise plans, and each tool call uses one request from your monthly API credits. It doesn't look up leaked credentials or monitored-account data. Continuous domain monitoring and alerts stay in the DarkWebSonar platform.
Tools
- dws_count_by_country
- dws_count_by_field
- dws_count_entries
- dws_fetch_entries
- dws_get_mitre_techniques
- dws_get_threat_actor_facets
- dws_get_threat_actor_profile
- dws_get_threat_actor_profile_by_id
- dws_recommend_threat_actors
- dws_search_actors
- Made by
- DarkWebSonar · Website
- Sign-in
- Required
- Connector URL
- https://connect.darkwebsonar.io/mcp
- Transport
- Streamable HTTP
- Works with
- Claude, Claude API, Claude Code, Claude Desktop
- Added
- October 11, 2026
- More info