Sentrysurface

Connects to SentrySurface's threat intelligence API to let Claude check URLs, scan domains, and pull reputation data without you needing to context switch to a security dashboard. You'd reach for this when analyzing suspicious links in emails, vetting third-party integrations, or doing quick security assessments during incident response. The streamable HTTP transport means it works through their hosted endpoint at api.sentrysurface.io rather than running locally. Useful if you're regularly copy-pasting URLs into VirusTotal or similar services and want that workflow embedded in your Claude conversations instead.