Skip to main content
Glama
BACH-AI-Tools

Ioc Search MCP Server

by BACH-AI-Tools
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

Related Servers

Alternatives to Ioc Search MCP Server

No user-submitted related servers found.

    Related Servers

    • mlab.sh MCP server by mlab-sh

      mlab.sh MCP serverofficial

      mlab-sh
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables threat intelligence for SOC and DFIR workflows, including IOC enrichment, CVE and threat actor lookup, domain scanning, and account-based scan management.
      2
      MIT

    • FastMCP ThreatIntel

      4R9UN
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables AI-powered threat intelligence analysis of IPs, domains, URLs, and file hashes across multiple threat intelligence platforms (VirusTotal, AlienVault OTX, AbuseIPDB, IPinfo) with APT attribution and interactive reporting through natural language queries.
      13 PyPI
      40
      Apache 2.0

    • MCP Threat Intel Server

      aplaceforallmystuff
      A
      license
      A
      quality
      C
      maintenance
      Provides unified access to multiple threat intelligence sources like AlienVault OTX, AbuseIPDB, and GreyNoise for security research and analysis. It enables users to perform simultaneous lookups on IPs, domains, hashes, and URLs across several platforms within a single response.
      7
      95 npm
      8
      MIT

    • Nullcone MCP Server

      maco144
      F
      license
      Not graded
      quality
      D
      maintenance
      Provides real-time threat intelligence for AI agents, enabling checks on IPs, domains, URLs, hashes, CVEs, prompt-injection payloads, and malicious AI-skill/MCP-tool definitions against a free database of 890K+ IOCs.
      -

    • Threat Intelligence MCP Server

      marc-shade
      A
      license
      A
      quality
      A
      maintenance
      Aggregates real-time threat intelligence from multiple sources including Feodo Tracker, URLhaus, CISA KEV, and ThreatFox, with IP/hash reputation checking via VirusTotal, AbuseIPDB, and Shodan for comprehensive security monitoring.
      11
      651
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A3.7/5.0

    Scored across 4 tools

    Disambiguation5/5

    Each tool has a clearly distinct purpose targeting a specific type of indicator: domain, hash, IP address, and URL. The descriptions reinforce this by detailing unique analysis aspects for each, such as DNS records for domains, hash categories for malware, geographic location for IPs, and URL metadata. There is no overlap or ambiguity in their functions.

    Naming Consistency5/5

    All tool names follow a consistent pattern of 'noun_search' (domain_search, hash_search, ip_address_search, url_search), using snake_case uniformly. This predictable naming scheme makes it easy for agents to understand and select the appropriate tool based on the indicator type.

    Tool Count5/5

    With 4 tools, the server is well-scoped for its purpose of IOC (Indicator of Compromise) search, covering the core indicator types: domain, hash, IP address, and URL. Each tool earns its place by providing specialized analysis, and the count is neither too thin nor excessive for the domain.

    Completeness5/5

    The tool set offers complete coverage for IOC search, including all major indicator types used in threat intelligence and security analysis. There are no gaps in the surface; agents can analyze domains, hashes, IPs, and URLs effectively, with detailed insights into reputation, security evaluations, and classifications from each tool.

    Maintenance

    ActivityInactive
    ResponsivenessNo issues

    Resources