Skip to main content
Glama
jmaciasc-google

Google Threat Intelligence MCP Server

by jmaciasc-google
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Hybrid

Related Servers

Alternatives to Google Threat Intelligence MCP Server

No user-submitted related servers found.

    Related Servers

    • Google Threat Intelligence MCP

      googleSandy
      F
      license
      B
      quality
      C
      maintenance
      Enables AI assistants to access Google's Threat Intelligence suite for file analysis, indicator of compromise searches, and reputation checking. It supports both local and cloud-based deployments for investigating campaigns, threat actors, and malware families.
      36
      4
      -

    • @ismalicious/mcp-server

      hexablob
      A
      license
      A
      quality
      C
      maintenance
      Gives AI agents threat-intelligence verdicts for IPs, domains, URLs and hashes, CVE lookups with EPSS and CISA KEV data, and a prompt-injection gate that scans untrusted text before the agent acts on it. Agents can also batch-check up to 100 indicators, hunt brand-lookalike domains, and track scan and request quotas.
      1
      249 npm
      MIT

    • Nullcone MCP Server

      maco144
      F
      license
      Not graded
      quality
      D
      maintenance
      Provides real-time threat intelligence for AI agents, enabling checks on IPs, domains, URLs, hashes, CVEs, prompt-injection payloads, and malicious AI-skill/MCP-tool definitions against a free database of 890K+ IOCs.
      -

    • OpenCTI MCP Server

      Space-C0wboy
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables AI assistants to query and manage OpenCTI threat intelligence data, including indicators, observables, reports, malware, and more, with read-only and optional write operations.
      MIT

    • MITRE ATT&CK MCP Server

      imouiche
      A
      license
      A
      quality
      D
      maintenance
      Enables AI-native access to the MITRE ATT\&CK framework, allowing LLMs and agents to query techniques, threat groups, software, and generate ATT\&CK Navigator layers for threat intelligence and security workflows.
      65
      52 npm
      5
      Apache 2.0

    • mcp-virustotal

      Jamess9028
      F
      license
      Not graded
      quality
      A
      maintenance
      Gives AI agents access to the VirusTotal v3 API so they can pull detection reports for files, URLs, IPs, and domains, then pivot through relationships like contacted hosts, dropped files, resolutions, and threat actors with cursor pagination. It also supports corpus search with VTI-style modifiers, sandbox behaviour summaries, and cached URL lookups to conserve API quota.
      -
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    B3.4/5.0

    Scored across 36 tools

    Disambiguation4/5

    Most tools have distinct purposes, e.g., searching different entity types (search_campaigns, search_malware_families) and retrieving reports (get_file_report, get_domain_report). However, search_threats can filter by collection_type, causing slight overlap with the specific search tools. Overall clear differentiation.

    Naming Consistency4/5

    Predominantly follows verb_noun pattern (e.g., create_collection, get_collection_report). Inconsistencies include 'analyse_file' (British spelling) versus American spelling used elsewhere, and verbose names like get_entities_related_to_a_collection. Still largely predictable.

    Tool Count3/5

    With 36 tools, the count is on the high side. The server covers a broad threat intelligence domain, but multiple similar tools (e.g., seven search tools, five get_entities_related_to_* tools) add redundancy. Could be streamlined without losing functionality.

    Completeness4/5

    The tool set covers CRUD operations for collections, detailed reports for various IOC types, and specialized searches. Notable gap: no tool to delete a collection entirely (only update). Digital threat monitoring and hunting rulesets are well-integrated. Minor missing features prevent a perfect score.

    Maintenance

    ActivityInactive
    ResponsivenessNo issues

    Resources