marc-shade/world-intel-mcp

World Intelligence MCP Server

Real-time global intelligence across 27 domains with 68 MCP tools, a live ops-center dashboard, CLI reports, and per-source circuit breakers. All data comes from free, public APIs — no paid subscriptions required.

Successor to threat-intel-mcp. This project evolved from a focused threat intelligence server into a comprehensive world intelligence platform covering markets, geopolitics, climate, military, space weather, AI research, and more.

What You Get

Total: 68 tools across 27 intelligence domains.

Quick Start

Install

# Clone
git clone https://github.com/marc-shade/world-intel-mcp.git
cd world-intel-mcp

# Install (Python 3.11+)
pip install -e .

# With dashboard support
pip install -e ".[dashboard]"

# With dev/test tools
pip install -e ".[dev]"

Run as MCP Server

# stdio mode (for Claude Code, Cursor, etc.)
world-intel-mcp

Claude Code Configuration

Add to your ~/.claude.json:

{
  "mcpServers": {
    "world-intel-mcp": {
      "command": "world-intel-mcp",
      "env": {}
    }
  }
}

Or if installed in a virtualenv:

{
  "mcpServers": {
    "world-intel-mcp": {
      "command": "/path/to/venv/bin/world-intel-mcp",
      "env": {}
    }
  }
}

Run the Live Dashboard

# Start the ops-center dashboard (default: http://localhost:8501)
intel-dashboard

# Custom port
intel-dashboard --port 9000

The dashboard is a map-first ops center with:

• Full-viewport Leaflet map with 7 toggle-able layers (quakes, military, conflict, fires, convergence, nuclear, infrastructure)
• 35+ live data feeds streaming via SSE (30-second refresh)
• 12 expandable drawer sections (alerts, markets, security, intelligence, AI watch, health, elections, shipping, social, nuclear, trends, infrastructure)
• HUD bar with real-time pills (quakes, aircraft, conflict zones, cyber IOCs, fires, displaced persons, Kp index, AI papers, alerts, shipping stress, outbreaks, services)
• Modal detail system — all external links open in-app, all data items expand to rich detail views
• Glassmorphic floating panels with dark-mode styling
• Per-source circuit breaker health monitoring

CLI Reports

# Daily intelligence brief
intel daily-brief

# Country dossier
intel country-dossier --country "Ukraine"

# Threat landscape overview
intel threat-landscape

Architecture

src/world_intel_mcp/
  server.py              # MCP server (stdio) — 64 tool definitions
  fetcher.py             # Async HTTP client with retries, stale-data fallback
  cache.py               # SQLite TTL cache with stale-data recovery
  circuit_breaker.py     # Per-source circuit breakers (3 failures -> 5min cooldown)
  cli.py                 # Click CLI for reports

  sources/               # One module per intelligence domain (25 modules)
    markets.py           # Stock indices, crypto, stablecoins, ETFs, sectors, commodities
    economic.py          # Energy prices, FRED macro, World Bank indicators
    seismology.py        # USGS earthquakes
    wildfire.py          # NASA FIRMS satellite fire hotspots (9 global regions)
    conflict.py          # ACLED, UCDP armed conflict events
    military.py          # adsb.lol + OpenSky military flights, aircraft details
    infrastructure.py    # Internet outages, submarine cable health, cloud service status
    maritime.py          # NGA navigation warnings, vessel snapshots
    climate.py           # Open-Meteo climate anomalies by zone
    news.py              # 80+ RSS feeds with per-feed circuit breakers, 4-tier source ranking
    intelligence.py      # GDELT, country briefs, signal convergence, risk scores
    prediction.py        # Polymarket prediction markets
    displacement.py      # UNHCR refugee/IDP statistics
    aviation.py          # FAA airport delays
    cyber.py             # URLhaus, Feodotracker, CISA KEV, SANS
    space_weather.py     # NOAA SWPC: Kp index, solar flares, alerts
    ai_watch.py          # arXiv AI papers, HuggingFace, lab trending
    health.py            # WHO DON, ProMED, CIDRAP disease outbreaks
    sanctions.py         # US Treasury OFAC SDN list search
    elections.py         # Global election calendar with proximity risk scoring
    shipping.py          # Dry bulk shipping stress index (BDRY, SBLK, EGLE, ZIM)
    social.py            # Reddit geopolitical discussion velocity
    nuclear.py           # USGS seismic monitoring near 5 nuclear test sites
    geospatial.py        # Query wrappers for static geospatial datasets
    service_status.py    # Cloudflare, AWS, Azure, GCP service health
    fleet.py             # Naval fleet activity report

  analysis/              # Cross-domain analysis + NLP + strategic synthesis
    signals.py           # Signal convergence detection
    instability.py       # Country instability index (CII v2)
    focal_points.py      # Multi-signal focal point detection
    temporal.py          # Temporal anomaly detection with SQLite baselines
    alerts.py            # Cross-domain alert digest + weekly trends
    escalation.py        # Dynamic hotspot escalation scoring
    surge.py             # Military surge anomaly detection
    cascade.py           # Infrastructure cascade simulation
    entities.py          # Named entity extraction (countries, leaders, orgs, CVEs, APTs)
    classifier.py        # Keyword-based event threat classification (14 categories)
    clustering.py        # Jaccard similarity news topic clustering
    spikes.py            # Keyword spike detection with Welford's algorithm
    posture.py           # Strategic posture — composite 9-domain risk assessment
    world_brief.py       # Structured daily intelligence summary
    exposure.py          # Population exposure near active events

  config/                # Static configuration data
    countries.py         # 22 intel hotspots, election calendar, nuclear test sites
    geospatial.py        # 70 military bases, 40 ports, 24 pipelines, 24 nuclear facilities
    entities.py          # 28 leaders, 41 orgs, 25 companies, 36 APT groups
    population.py        # 105 major cities (pop >2M) for exposure analysis

  reports/               # Report generation
    generator.py         # Report orchestrator
    markdown_report.py   # Markdown output
    html_report.py       # HTML output (Jinja2 templates)
    templates/           # HTML report templates

  dashboard/             # Live ops-center dashboard
    app.py               # Starlette app with SSE streaming (35+ feeds)
    index.html           # Map-first dashboard UI (14 map layers, 20+ drawer sections)

  tests/                 # Test suite
    conftest.py          # Shared fixtures (mock fetcher, circuit breaker)
    test_sources.py      # Source module tests
    test_cache.py        # Cache TTL tests
    test_analysis.py     # Analysis engine tests

Circuit Breakers

Every external API call goes through a circuit breaker. After 3 consecutive failures, the source is "tripped" for 5 minutes, preventing cascading timeouts. Each RSS feed gets its own breaker (e.g., rss:bbc_world, rss:ars_technica), so a single broken feed doesn't kill all news.

Data Flow

External APIs -> Fetcher (httpx + retries) -> Circuit Breaker -> Cache (TTL) -> MCP Tool Response
                                                                              -> Dashboard (SSE)
                                                                              -> CLI Report

MCP Tools Reference

Financial Markets (7 tools)

Economic (3 tools)

Natural Disasters (2 tools)

Security & Conflict (4 tools)

Military & Defense (5 tools)

Infrastructure (4 tools)

Maritime (2 tools)

Geospatial Datasets (4 tools)

News & Media (3 tools)

Geopolitical (2 tools)

Humanitarian (2 tools)

Environment & Space (2 tools)

Health & Social (3 tools)

AI/AGI Research (1 tool)

Shipping & Transport (2 tools)

Nuclear (1 tool)

Intelligence Analysis (8 tools)

NLP Intelligence (4 tools)

Strategic Synthesis (4 tools)

Cross-Domain Alerts (2 tools)

Reports (3 tools)

System (2 tools)

Environment Variables

All other data sources (CoinGecko, USGS, adsb.lol, UCDP, NGA, FAA, Polymarket, UNHCR, NOAA SWPC, arXiv, Reddit, hexdb.io, WHO, OFAC, etc.) use free, unauthenticated public APIs.

Development

# Install dev dependencies
pip install -e ".[dev]"

# Run tests
pytest

# Run with coverage
pytest --cov=world_intel_mcp

# Type checking (if configured)
mypy src/

Adding a New Source

1. Create src/world_intel_mcp/sources/your_source.py
2. Implement async def fetch_your_data(fetcher: Fetcher, **kwargs) -> dict
3. Use fetcher.get_json() / fetcher.get_xml() for HTTP calls (includes caching + circuit breakers)
4. Import in server.py, add a Tool definition, and wire up the call_tool handler
5. Add to dashboard/app.py if you want it on the live dashboard
6. Add tests in tests/

License

MIT