MCP servers tagged cti
13 live MCP servers tagged "cti", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with cti.
Mallorymcp
Mallory - Cyber Threat Intelligence MCP Server
Cyberbro
Using MCP is fun with Cyberbro!
Cti Expert
CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 repo…
Zettelforge
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
ZettelForge
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
Misp MCP
Turn your MISP into an MCP service
Maltego MCP
OSINT graphs are point-and-click busywork. maltego-mcp lets an LLM author the .mtgx and run the whois, DNS, ASN, and crt.sh lookups. Works on the Basic plan.
Uhbs Standard
Universal Honeypot Benchmarking Standard (UHBS) v4.6.0 — open-source beta framework for vendor-neutral honeypot / deception evaluation
Dfir Threat Intel Platform
A 135+ tool DFIR toolkit, a live self-updating threat-intel platform, and a 332-tool MCP server — on one Cloudflare Workers deploy. MIT licensed. Portfolio: pranithjain.qzz.io
Threat Intelligence MCP
MCP server for the ThreatCluster threat intelligence API: incident clusters, IOCs, CVEs, ransomware leak-site victims and entity profiles as tools for Claude, Cursor, VS Code and…
Misp Galaxy MCP
A small Model Context Protocol (MCP) server for searching the MISP galaxy knowledge base.
Cti Glossary
MCP server for CTI and cyber jargon disambiguation — MITRE ATT&CK, OFAC SDN, and a hand-curated cross-vendor threat-actor alias map, with FTS5 full-text search across sources
Server
86 typed threat-intelligence tools for MCP-compatible assistants. Connect over Streamable HTTP, with no local server to run.