AI Marketplaces Leaderboard

DarkWebSonar

Claude connectorCommunity

Ask Claude about ransomware groups, leak-site posts, and threat actors, answered from DarkWebSonar's live dark-web intelligence.

View in Claude directory
Tools
10

exposed by this connector

Movement

From our daily snapshots over the last 30 days.

Rank by popularity

#4586of 5,293—24h—7d

Not enough data points to chart.

Rank by trending score

—not ranked—24h—7d
—

Popularity score

2,000—24h—7d

Not enough data points to chart.

Trending score

——24h—7d
—

In its categories

How this connector compares with others in the same category. Positions are counted within the category, not across the whole directory.

Productivity2,478th of 2,878 by popularity · not ranked by trending score
Order by

All 2,968 Productivity connectors

Developer tools847th of 952 by popularity · not ranked by trending score
Order by

All 983 Developer tools connectors

Data analytics1,758th of 1,977 by popularity · not ranked by trending score
Order by

All 2,041 Data analytics connectors

DarkWebSonar brings live dark-web threat intelligence into Claude. Ask in plain language who a ransomware group is targeting, how many leak-site posts hit an industry or country over a rolling window, or whether a client organisation has appeared on a leak site recently. It's built for MSPs and security teams who brief clients on threats.

The connector has 10 read-only tools. They search and profile threat actors, recommend the actors most relevant to an industry and country, count and list leak-site and intelligence entries with filters for victim organisation, site, industry, and country, and map MITRE ATT&CK technique IDs to their names and tactics. Nothing is written back to your account.

You sign in with OAuth and paste your DarkWebSonar API key on our authorization screen, so the key never sits in a config file. The connector is included with the Pro and Enterprise plans, and each tool call uses one request from your monthly API credits. It doesn't look up leaked credentials or monitored-account data. Continuous domain monitoring and alerts stay in the DarkWebSonar platform.

Tools

  • dws_count_by_country
  • dws_count_by_field
  • dws_count_entries
  • dws_fetch_entries
  • dws_get_mitre_techniques
  • dws_get_threat_actor_facets
  • dws_get_threat_actor_profile
  • dws_get_threat_actor_profile_by_id
  • dws_recommend_threat_actors
  • dws_search_actors
Categories
Made by
DarkWebSonar · Website
Sign-in
Required
Connector URL
https://connect.darkwebsonar.io/mcp
Transport
Streamable HTTP
Works with
Claude, Claude API, Claude Code, Claude Desktop
Added
October 11, 2026
More info