MCP servers tagged threat-intel

4 live MCP servers tagged "threat-intel", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with threat-intel.

live servers

avg trust

Secops Agent Triage

Tool-calling SOC triage agent with multi-format alert ingestion, threat-intelligence enrichment, and structured NIST/MITRE assessments.

Soc Stack

One-command self-hosted SOC lab for Proxmox: Wazuh, TheHive, Cortex, MISP, Zeek, Suricata, and MCP servers for homelab blue-team training.

Cookieaudit

cognis-digital

Audit Set-Cookie flags (Secure/HttpOnly/SameSite) from a response dump

Headerscan

cognis-digital

Grade HTTP security headers (CSP/HSTS/XFO) A-F from a response dump