Cybersecurity Threat Intelligence MCP
Server Details
CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.
The last two health checks of this connector failed. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
- Status
- Unhealthy
- Uptime
- 0.0% over the last 24 hours
- Last Tested
- Transport
- Streamable HTTP
- URL
- Server Listing
- Cybersecurity Threat Intelligence MCP
- ChatGPT
- –
- Claude
- –
TDQS
Scored across 9 tools
Each tool targets a distinct resource: domain, IP, CVE, threat feed, daily brief, product scan, and meta-info. The only closely related pair (brief_summary vs daily_brief) is explicitly differentiated as a cheap sample vs full brief, so no real ambiguity exists.
All tool names use lowercase snake_case, but the grammatical pattern is mixed: some are verb_noun (check_domain, check_ip, search_cve) while others are noun_noun or adjective_noun (cve_detail, daily_brief, threat_feed, vulnerability_scan, mint_info, brief_summary). The style is consistent, but the verb-first convention is not uniform.
Nine tools cover the core threat-intelligence workflows without bloat: reputation lookups, CVE search/details, vulnerability scanning, briefs, and a live feed. This is a well-scoped count for the domain.
The server covers IP and domain reputation, CVE research, product scanning, and daily briefs, but lacks a single-tool lookup for hash or URL reputation (only available via the generic threat_feed). This is a workable minor gap since the feed can filter by those types, but a dedicated check_hash or check_url tool would make the surface fully complete.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
CVE & vulnerability search: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, exploits, patches, versions.
CVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions, CPE configurations.
Vulnerability records: CVE, GHSA, CISA KEV, EPSS and vendor fixes in one place. No key needed.
Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceSearch and filter public CVEs and read any of them in full, with CVSS scores, CISA KEV and EPSS, and profile vendors. Read-only, free and open source.25MIT
- AlicenseAqualityCmaintenanceEnables AI agents to search, correlate, and monitor real-time vulnerability intelligence from NVD, CISA KEV, EPSS, and MITRE ATT&CK, including CVE details, critical CVE tracking, known exploited vulnerabilities, and exploitation probability scores.52MIT
- AlicenseNot gradedqualityDmaintenanceProvides multi-source vulnerability intelligence for AI-powered security operations, combining NVD CVSS, CISA KEV, and EPSS scores without requiring an API key.1MIT
- AlicenseNot gradedqualityDmaintenanceProvides CVE lookup, search, and exploit intelligence from public vulnerability sources (NVD, CISA KEV, EPSS) for AI agents to produce remediation guidance without consuming LLM tokens for data fetching.1MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.