Is ca.ohey/ohey safe to use?

ca.ohey/ohey has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.

How do I install ca.ohey/ohey?

ca.ohey/ohey supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can ca.ohey/ohey do?

ca.ohey/ohey provides 1 tool: mcpServers. See the full tools list on the server page for descriptions and parameters.

What AI clients work with ca.ohey/ohey?

ca.ohey/ohey is compatible with claude-desktop, cursor, claude-code. It uses http transport.

Is ca.ohey/ohey actively maintained?

ca.ohey/ohey is actively maintained - last commit was 9 days ago. It has 1 GitHub stars.

ca.ohey/ohey

Look up hosts in the Ohey web malware feed, read CVEs and scan URLs with Ohey's scanner.

1 1 tool GitHub

No known CVEs

No license

Actively maintained

Last commit 9d ago

Works with most clients

Transport: http

1 tool · ~18 tok

Grade A · 0.0% of 200K ctx

MCPpedia last refreshed this data 22h ago

Edit this pageView history

ca.ohey/ohey is an MCP server that look up hosts in the Ohey web malware feed, read CVEs and scan URLs with Ohey's scanner. Its tool list has not been published yet over http, requires no API key, and scores 70/100 on MCPpedia's security, maintenance and efficiency rubric.

Security

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "ohey-research": {
      "url": "https://ohey.ca/mcp/research"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/ca-ohey-ohey)](https://mcppedia.org/s/ca-ohey-ohey)

Read me

What ca.ohey/ohey does

Look up hosts in the Ohey web malware feed, read CVEs and scan URLs with Ohey's scanner.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

70/100across 5 weighted dimensions

How we score →

0255075100

−30

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (1)

Click any tool to inspect its schema.

~18 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is ca.ohey/ohey safe to use?: ca.ohey/ohey has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.
How do I install ca.ohey/ohey?: ca.ohey/ohey supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can ca.ohey/ohey do?: ca.ohey/ohey provides 1 tool: mcpServers. See the full tools list on the server page for descriptions and parameters.
What AI clients work with ca.ohey/ohey?: ca.ohey/ohey is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is ca.ohey/ohey actively maintained?: ca.ohey/ohey is actively maintained - last commit was 9 days ago. It has 1 GitHub stars.

Similar servers

Others in security

View all →

io.github.vmoranv/jshookmcp95

Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.

2.1k 2

io.github.KryptosAI/mcp-observatory92

MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.

120 4

io.github.CakeRepository/1password92

MCP server for 1Password service accounts — tools and resources for vaults and credentials

22 8

io.github.arthurpanhku/dvalincode92

Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.

120 1

MCP Security Weekly

Get CVE alerts and security updates for ca.ohey/ohey and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Security

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "ohey-research": {
      "url": "https://ohey.ca/mcp/research"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/ca-ohey-ohey)](https://mcppedia.org/s/ca-ohey-ohey)

Read me

What ca.ohey/ohey does

Look up hosts in the Ohey web malware feed, read CVEs and scan URLs with Ohey's scanner.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

Ohey MCP servers

Ohey scans websites for injected malware: ClickFix and fake update lures, skimmers, phishing kits, EtherHiding loaders, and the C2 and distribution servers behind them. There are two remote MCP servers (Streamable HTTP).

Server	URL	Sign-in
Research	`https://ohey.ca/mcp/research`	None
Feed and API	`https://ohey.ca/mcp`	Ohey account with API access

Install

Both servers are remote Streamable HTTP servers, so there is nothing to download. The examples add the research server; for the feed server, use the name ohey and the URL https://ohey.ca/mcp, and the client opens ohey.ca to sign in the first time.

Both are in the MCP Registry as ca.ohey/research and ca.ohey/ohey.

Claude

Web, desktop and mobile: Settings, Connectors, Add custom connector, then paste the URL.

Claude Code:

claude mcp add --transport http ohey-research https://ohey.ca/mcp/research

ChatGPT

Custom MCP servers need developer mode, which OpenAI offers on some plans and has moved between settings pages; a Business or Enterprise admin may have to allow custom connectors first.

Turn on developer mode in ChatGPT's settings.
Add a custom connector (or app), give it a name and paste the URL.
Set Authentication to No authentication for the research server, or OAuth for the feed server.
In a new chat, turn the connector on from the tools menu.

OpenAI Codex

codex mcp add ohey-research --url https://ohey.ca/mcp/research

For the feed server, add it with --url https://ohey.ca/mcp, then run codex mcp login ohey to sign in. Or in ~/.codex/config.toml:

[mcp_servers.ohey-research]
url = "https://ohey.ca/mcp/research"

Gemini CLI

gemini mcp add --transport http ohey-research https://ohey.ca/mcp/research

Or in settings.json, under mcpServers:

"ohey-research": { "httpUrl": "https://ohey.ca/mcp/research" }

For the feed server, run /mcp auth ohey in the CLI to sign in.

Cursor

In ~/.cursor/mcp.json, or .cursor/mcp.json in a project:

{
  "mcpServers": {
    "ohey-research": { "url": "https://ohey.ca/mcp/research" }
  }
}

VS Code (GitHub Copilot)

code --add-mcp '{"name":"ohey-research","type":"http","url":"https://ohey.ca/mcp/research"}'

Or run MCP: Add Server, choose HTTP and paste the URL. The JSON form, in .vscode/mcp.json or your user mcp.json:

{
  "servers": {
    "ohey-research": { "type": "http", "url": "https://ohey.ca/mcp/research" }
  }
}

Other clients

Any client that supports remote MCP servers over Streamable HTTP takes the URL as is. Most read an mcpServers object with a url (some call the field serverUrl or httpUrl). A client that only runs local stdio servers can reach either one through mcp-remote:

{
  "mcpServers": {
    "ohey-research": { "command": "npx", "args": ["-y", "mcp-remote", "https://ohey.ca/mcp/research"] }
  }
}

Research server

The research Ohey publishes on ohey.ca/threats and ohey.ca/research, as tools. Anyone can connect, with no sign-in.

Tool	What it does
`list_threats`	Every technique, with its page, a summary, site counts and its kits.
`get_threat`	A technique or kit: sites matched by month, how many were still infected when rescanned, WordPress and Joomla shares, common plugins, kits seen on the same sites, its EtherHiding contracts, its ClickFix command hosts and articles.
`list_research_articles`	Research articles, newest first.
`get_article`	One article's summary, key facts (hashes, active window, scale) and its indicators of compromise, as Markdown.
`search_clickfix_commands`	Hosts that ClickFix lure commands fetch from, by kit or host, with the latest command for each, defange

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

70/100across 5 weighted dimensions

How we score →

0255075100

−30

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (1)

Click any tool to inspect its schema.

~18 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is ca.ohey/ohey safe to use?: ca.ohey/ohey has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.
How do I install ca.ohey/ohey?: ca.ohey/ohey supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can ca.ohey/ohey do?: ca.ohey/ohey provides 1 tool: mcpServers. See the full tools list on the server page for descriptions and parameters.
What AI clients work with ca.ohey/ohey?: ca.ohey/ohey is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is ca.ohey/ohey actively maintained?: ca.ohey/ohey is actively maintained - last commit was 9 days ago. It has 1 GitHub stars.