Skip to main content
Glama
Sign In
greynoise-mcp-server

greynoise-mcp-server

Official
by GreyNoise-Intelligence
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Remote

Related Servers

Alternatives to greynoise-mcp-server

No user-submitted related servers found.

    Related Servers

    • wrg-mcp-server

      WRG-11
      A
      license
      Not graded
      quality
      A
      maintenance
      An MCP server that exposes a 60+ tool security and threat-intel stack to AI agents, enabling secret scanning, Sigma rule generation, ransomware lookup, OSINT, and deep research.
      1
      MIT

    • OSINT MCP Server

      CloudWaddie
      A
      license
      D
      quality
      D
      maintenance
      A comprehensive MCP server providing tools for IP, domain, email, and image-based open-source intelligence. It integrates services like Shodan, VirusTotal, and HaveIBeenPwned to facilitate advanced security research and data gathering.
      56
      40 npm
      ISC

    • tenable-mcp-server

      tarhou
      A
      license
      Not graded
      quality
      D
      maintenance
      An MCP server for Tenable Vulnerability Management and the Tenable One platform, enabling LLMs to query assets, vulnerabilities, scans, exposure metrics, attack paths, and more via natural language.
      1
      MIT

    • Cyberbro MCP Server

      stanfrbd
      A
      license
      A
      quality
      A
      maintenance
      An MCP server that extracts Indicators of Compromise (IoCs) from unstructured text and checks their reputation across multiple threat intelligence services. It enables real-time analysis of IPs, domains, hashes, and URLs, providing enriched context for security workflows within LLMs.
      5
      35 PyPI
      19
      MIT

    • NetMCP

      cortexc0de
      A
      license
      B
      quality
      C
      maintenance
      A professional-grade network analysis MCP server that integrates Wireshark/TShark, Nmap, and threat intelligence to enable packet capture, network scanning, threat detection, and credential extraction through natural language.
      41
      2
      MIT

    • offsec-mcp

      nadirzhon
      A
      license
      B
      quality
      C
      maintenance
      MCP server for offensive-security tooling, enabling AI agents to run reconnaissance, CVE intelligence, JavaScript analysis, HTTP probing, and port scanning against authorized targets.
      10
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    B3.4/5.0

    Scored across 48 tools

    Disambiguation3/5

    Most tool families are distinct (blocklists, alerts, BSI, callbacks, sessions), but there is meaningful overlap between gnql-query, gnql-metadata-query, gnql-stats, gnql-timeseries, and gnql-timeseries-stats, as well as between lookup-ip-context, quick-check-ip, multi-ip-check, and bsi-lookup. Session PCAP export also appears in three forms (get-session-pcap, export-sessions-pcap, export-session-data). Detailed descriptions mitigate most confusion, but an agent must read carefully to pick the right variant.

    Naming Consistency3/5

    All names are lowercase kebab-case, which is consistent, but the verb/noun ordering is mixed: verb-first (get-session, list-alerts, create-blocklist) coexists with noun-first or noun-only names (session-fields, session-counts, callback-overview, gnql-timeseries-stats, bsi-trust-stats). The result is readable but not predictable enough to infer a tool's shape from its name alone.

    Tool Count2/5

    48 tools is heavy for a single-domain threat-intelligence server and far exceeds the typical 3-15 range. While the domain is broad (GNQL, sessions, tags, CVEs, blocklists, alerts, BSI, callbacks), many tools are near-duplicate query/export variants that could be consolidated into parameterized endpoints.

    Completeness4/5

    Coverage is strong: full CRUD plus enable/disable for both blocklists and alerts, rich session analytics, tag discovery/activity, BSI lookups, callback/C2 endpoints, and multi-format IP and GNQL queries. Minor gaps exist — there is no general CVE list/search (only get-cve-details and trending vulnerabilities) and little workspace/account context — but core workflows are well supported.

    Maintenance

    ActivityMaintained
    ResponsivenessNo recent community issues

    Resources