- Conduid
- Marketplace
- #threat-intelligence
MCP servers tagged threat-intelligence
133 live MCP servers tagged "threat-intelligence", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with threat-intelligence.
Gti Lookup
Threat context from Google Threat Intelligence (GTI Standard feature set) - CLI + local MCP server
Yara Detection Harness
Detection-as-code for generated text & code: hand-written YARA rules, a paired synthetic corpus, and a CI harness gating on recall + false-positive rate — plus a VirusTotal enrich…
Copilot MCP Soc Pack
Community SOC Pack for Microsoft Security Copilot. Free-API MCP server and OpenAPI plugin bundle (KEV, EPSS, MITRE ATTACK, Abuse.ch, GreyNoise, AbuseIPDB, crt.sh, ransomware.live,…
Veridano Skill
Claude Skill for real-time government cybersecurity intelligence from CISA, FBI, NIST, NSA
Brolga
Open-source Rust threat intelligence context engine
CyberFortressX
Enterprise Agentic AI SIEM & SOC platform for Palo Alto Firewall analytics, threat intelligence, risk scoring, and automated incident response using FastAPI, IBM Agent Studio and…
Urlscan MCP
MCP server for the urlscan.io API - 14 tools, shaped responses (240-812x smaller), no false-clean verdicts.
Oraclewatch
Monitors price-oracle feeds for staleness, deviation, and manipulation exposure, simulating TWAP/spot attack profitability per pool.
Cti Glossary
MCP server for CTI and cyber jargon disambiguation — MITRE ATT&CK, OFAC SDN, and a hand-curated cross-vendor threat-actor alias map, with FTS5 full-text search across sources
TalonHound
Self-hosted threat intelligence and IOC management platform
Agent Honeypot
Defensive deception framework for autonomous LLM agents: synthetic MCP tool servers, 24-dimension fingerprinting, digest-only capture, counterexample-driven lure evolution, audite…
Security News MCP Researcher
Local-only security news researcher: RSS inbox triage, Claude-powered research chat with pluggable MCP tools, and weekly security-meeting notes generation.
Triple Arbiter
x402 settlement facilitator + EAS-compatible threat-intel attestation issuer on Base mainnet
AI Threats
AI-related threat intelligence pipeline with KEV/EPSS enrichment, MCP server, and Claude-powered classification
Mrholmes Osint Suite
SSG REAPER OSINT kit — authorized research CLI, GUI, and MCP
Redpath
Active Directory attack path mapper — minimum-cost paths + remediation priority
Microsoft Defender MCP
Rust MCP server for Microsoft Defender XDR and Defender for Endpoint: 88 tools for hunting, threat intelligence, vulnerability management, and gated response.
Threat Detection Lab
Agent exposure review ("what changes if I add this tool to my agent?"), a deterministic detection-boundary harness, and a CTI pipeline. Public data only; every figure measured.
Http Bait
An HTTP honeypot built to measure exploitation rather than discovery: attributable honeytokens, a shared detector table, and a reproducible offline analyzer.
Ttphunt
Hunt MITRE ATT&CK techniques across logs with a rule pack
PacketForge
AI network analysis toolkit + MCP server for authorized pentesting: Wireshark/tshark capture, credential extraction, threat intel, Nmap scanning. | 面向授权渗透测试的 AI 网络分析工具库 + MCP Serv…
Ptes AI Agent ChatGpt
Framework de IA multiagente para evaluaciones de seguridad autorizadas bajo PTES, enfocado en OSINT, gestión de evidencias, validación, control de políticas y orquestación indepen…
Workers Honeypot
A Cloudflare Workers + D1 multi-skin honeypot for defensive security research, attack telemetry, credential-pattern analytics, and live threat visualization.
CYBERDUDEBIVASH MCP Server
CYBERDUDEBIVASH® MCP Server – Zero-Trust AI Cybersecurity Command Center (Private Development) Production-grade autonomous AI agents for SOC, pentesting, malware analysis, threat…
Shodan
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and C…
Shodan
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and C…
Shodan
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and C…
Server
NotCVE MCP server — live vulnerability intelligence for AI agents: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, affected versions, exploits and patches from 80+ sources.
Shodan
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and C…
AbuseIPDB MCP
Production-ready AbuseIPDB MCP server in Go for IP reputation, threat intelligence, CIDR analysis, blacklists, and abuse reporting.
Server
86 typed threat-intelligence tools for MCP-compatible assistants. Connect over Streamable HTTP, with no local server to run.
Cybermcp
MCP server providing CVE lookup, IP geolocation, and file hash analysis tools for Claude — built with FastMCP
Pranith Jain.github.io
No description published.