Skip to main content
Glama
Sign In
Google Threat Intelligence MCP Server

Google Threat Intelligence MCP Server

by jmaciasc-google
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Hybrid

Related Servers

Alternatives to Google Threat Intelligence MCP Server

No user-submitted related servers found.

    Related Servers

    • Google Threat Intelligence MCP

      googleSandy
      F
      license
      B
      quality
      D
      maintenance
      Enables AI assistants to access Google's Threat Intelligence suite for file analysis, indicator of compromise searches, and reputation checking. It supports both local and cloud-based deployments for investigating campaigns, threat actors, and malware families.
      36
      4
      -
    • F6 Threat Intelligence MCP Server

      F6 Threat Intelligence MCPofficial

      F6-Security
      A
      license
      A
      quality
      C
      maintenance
      Enables AI assistants to search and retrieve threat-intelligence collections—including leaks, malware, attacks, suspicious IPs, threats, and group profiles—through indicator queries, filtered pagination, update tracking, and WHOIS enrichment.
      9
      Apache 2.0

    • @ismalicious/mcp-server

      hexablob
      A
      license
      A
      quality
      C
      maintenance
      Gives AI agents threat-intelligence verdicts for IPs, domains, URLs and hashes, CVE lookups with EPSS and CISA KEV data, and a prompt-injection gate that scans untrusted text before the agent acts on it. Agents can also batch-check up to 100 indicators, hunt brand-lookalike domains, and track scan and request quotas.
      1
      208 npm
      1
      MIT

    • Nullcone MCP Server

      maco144
      F
      license
      Not graded
      quality
      D
      maintenance
      Provides real-time threat intelligence for AI agents, enabling checks on IPs, domains, URLs, hashes, CVEs, prompt-injection payloads, and malicious AI-skill/MCP-tool definitions against a free database of 890K+ IOCs.
      -

    • OpenCTI MCP Server

      Space-C0wboy
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI assistants to query and manage OpenCTI threat intelligence data, including indicators, observables, reports, malware, and more, with read-only and optional write operations.
      1
      MIT

    • mcp-virustotal

      ali7265
      A
      license
      Not graded
      quality
      A
      maintenance
      Gives AI agents access to the VirusTotal v3 API so they can analyze files, URLs, IPs, and domains and return detection reports alongside pivotable relationships such as contacted hosts, dropped files, and resolutions. It also supports corpus searches, sandbox behaviour summaries, threat-actor and malware-family collections, and cursor-based paging across 100+ relationship types.
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    B3.4/5.0

    Scored across 36 tools

    Disambiguation4/5

    Most tools have distinct purposes, e.g., searching different entity types (search_campaigns, search_malware_families) and retrieving reports (get_file_report, get_domain_report). However, search_threats can filter by collection_type, causing slight overlap with the specific search tools. Overall clear differentiation.

    Naming Consistency4/5

    Predominantly follows verb_noun pattern (e.g., create_collection, get_collection_report). Inconsistencies include 'analyse_file' (British spelling) versus American spelling used elsewhere, and verbose names like get_entities_related_to_a_collection. Still largely predictable.

    Tool Count3/5

    With 36 tools, the count is on the high side. The server covers a broad threat intelligence domain, but multiple similar tools (e.g., seven search tools, five get_entities_related_to_* tools) add redundancy. Could be streamlined without losing functionality.

    Completeness4/5

    The tool set covers CRUD operations for collections, detailed reports for various IOC types, and specialized searches. Notable gap: no tool to delete a collection entirely (only update). Digital threat monitoring and hunting rulesets are well-integrated. Minor missing features prevent a perfect score.

    Maintenance

    ActivityInactive
    ResponsivenessNo recent community issues

    Resources