Threat Actors

`list_threat_actors_by_industry`

Returns threat actors known to target a specified industry vertical (for example, "Financial Services" or "Healthcare"), ordered by technique count descending. Costs 1 credit.

POST

tools/call

Cost: 1 credit per successful call · Response shape: jsonb

Parameters

industrystringrequired

Industry name to filter by, 1–80 characters. Examples: Financial Services, Healthcare, Government, Energy, Manufacturing.

limitintegeroptionaldefault: 50

Maximum number of actors to return. Accepted range: 1–100.

Example invocation

Ask your agent: "Which threat actors target the financial services sector?"

curl -s https://mcp.precursorintelligence.com \
  -H "Authorization: Bearer $PRECURSOR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_threat_actors_by_industry","arguments":{"industry":"Financial Services","limit":10}}}'

Response

result.content[0].text (parsed)

{
  "count": 3,
  "industry": "Financial Services",
  "limit": 10,
  "items": [
    {
      "name": "Lazarus Group",
      "aliases": ["HIDDEN COBRA", "Guardians of Peace"],
      "country": "KP",
      "suspected_sponsor": "True",
      "target_categories": ["Financial Services", "Cryptocurrency", "Defense"],
      "technique_count": 42
    },
    {
      "name": "FIN7",
      "aliases": ["Carbanak", "Navigator Group"],
      "country": "RU",
      "suspected_sponsor": "False",
      "target_categories": ["Financial Services", "Hospitality", "Retail"],
      "technique_count": 31
    },
    {
      "name": "Scattered Spider",
      "aliases": ["UNC3944", "Octo Tempest"],
      "country": null,
      "suspected_sponsor": "False",
      "target_categories": ["Financial Services", "Insurance", "Telecommunications"],
      "technique_count": 18
    }
  ],
  "generated_at": "2026-05-29T09:15:42.304Z"
}

The full MCP envelope, including _meta.precursor with request_id, credits, and response_truncated, is described in Response Format.

Errors

Code	Message	When
`-32602`	`invalid_params: industry: required_string`	`industry` was omitted or not a string
`-32602`	`invalid_params: industry: length:1..80`	`industry` is empty or exceeds 80 characters
`-32602`	`invalid_params: limit: min:1`	`limit` is less than 1
`-32602`	`invalid_params: limit: max:100`	`limit` exceeds 100
`-32001`	`unauthorized`	API key is invalid or revoked
`-32002`	`insufficient_credits`	Your credit balance is zero. Top up from the dashboard

A well-formed query for an industry with no matching actors returns a successful response with count: 0 and an empty items array. No credit is charged for argument-validation failures.