What happened
On Sept 28, 2026 Recorded Future announced GA of Recorded Future MCP, giving AI agents (Claude, ChatGPT, Copilot, Cursor, Gemini CLI) OAuth-authenticated access to 80+ intelligence tools — threat actor profiles, Risk Scores, ransomware metadata, sandbox, dark-web intel — including write-capable tools to update Watch Lists and author Analyst Notes.
Why it matters
Moves trusted threat intelligence natively into agentic SOC workflows (enrichment, detection engineering, IR triage) after a year-long pilot with 100+ enterprises, making agent decisions auditable and intelligence-backed rather than LLM-generated guesswork.
Applicability
Threat intel and SOC automation teams running AI agents should evaluate MCP connectivity to the Intelligence Graph for enrichment and reporting; GA now, Integration Center tile available.