The Mallory MCP Server provides AI assistants with access to a comprehensive cyber threat intelligence database, enabling real-time queries for vulnerabilities, threat actors, malware, exploits, and related security intelligence.

Core Capabilities:

Vulnerability Intelligence - Find specific CVEs with detailed information including CVSS scores, EPSS predictions, and CISA KEV status; search vulnerabilities with filtering by CVE, UUID, or keywords; retrieve detection signatures, exploitation records, and vulnerable configurations (CPE data) to identify affected products and versions.

Threat Actor Intelligence - Get detailed threat actor profiles by UUID or name, including TTPs, target sectors, and intelligence mentions; list and search threat actors with filtering and sorting; monitor recent threat actor mentions from intelligence sources to track emerging threats and active campaigns.

Exploitation Tracking - Get specific exploitation records by UUID with details on when/how vulnerabilities were exploited; list exploitation data with filtering to identify actively exploited vulnerabilities and detection methods.

Additional Capabilities - Access malware research, MITRE ATT&CK patterns, breach intelligence, organization security profiles, product security information, advisories, threat intelligence stories, mention monitoring across entities, and search across all entity types.

Key Use Cases - Risk assessment and vulnerability prioritization based on active exploitation; threat intelligence gathering for security briefings; building detection rules from published signatures; asset vulnerability mapping using CPE data; monitoring the threat landscape; incident response investigation and attribution.

Enables configuration of the MCP server using environment variables stored in a .env file, supporting settings like API keys and environment selection.

Allows for installation of the MCP server directly from the GitHub repository, providing access to the full codebase and development resources.

1. Click on "Install Server".

2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.

3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Mallory MCP Server get details on the latest critical vulnerability affecting Apache servers"

That's it! The server will respond to your query, and you can continue using it as needed.

Here is a step-by-step guide with screenshots.