F
licenseNot graded
qualityD
maintenanceProvides threat intelligence tools like IoC lookups, event backtracking, and IP enrichment via MCP, enabling automated triage and evidence queries.
1
-
maltiverse-mcp
by lumutech
Related Servers
Alternatives to maltiverse-mcp
No user-submitted related servers found.
Related Servers
- AlicenseNot gradedqualityDmaintenanceProvides MCP tools for IP threat intelligence lookup and enrichment, including single IP lookup, bulk hunting, ASN expansion, and feed status queries.MIT
aether-mcpofficial
AlicenseAqualityBmaintenanceEnables private file and URL scanning, IOC reputation lookups, threat report search, and campaign pivoting through a threat-intelligence API.25MIT- AlicenseNot gradedqualityDmaintenanceEnables users to access and query the ORKL Threat Intelligence Library, including threat reports, threat actors, and sources, through MCP tools and resources.6MIT
- AlicenseAqualityDmaintenanceEnables comprehensive threat analysis for Indicators of Compromise (IoCs) including IP addresses, file hashes, domains, and URLs. It provides detailed reputation scores, security vendor evaluations, and network metadata to facilitate security assessments and risk detection.4MIT
- AlicenseNot gradedqualityDmaintenanceProvides comprehensive IP and domain security intelligence, enabling analysis of IP addresses and domains for threat and reputation information.1MIT
TDQS
A4.3/5.0
Scored across 6 tools
Disambiguation5/5
Each tool targets a distinct indicator type (IP, hostname, URL, hash) plus a router and a search, and the descriptions explicitly cross-reference the others ('for domains use X, for full URLs use Y'). The only intentional overlap — maltiverse_check_indicator as a default router — is clearly framed as a fallback to the specific tools rather than a competing option.
Naming Consistency5/5
All six tools follow a single lowercase snake_case verb_noun convention with a uniform server prefix (maltiverse_check_ip, maltiverse_check_url, maltiverse_search). The one meta-tool (check_indicator) still conforms to the same pattern, so the surface is fully predictable.
Tool Count5/5
Six tools is well-proportioned for a read-only threat-intel lookup server, with one tool per indicator type plus a router and a search. There is no filler, and each tool earns its place by mapping to a real Maltiverse endpoint.
Completeness4/5
All the core lookup paths an agent needs — IP, hostname, URL, hash, generic routing, and dataset search with pagination guidance — are covered with no dead ends. Minor gaps remain: no bulk/multi-indicator lookup and no write-side operations (tagging, sample submission) that the underlying API likely supports.
Maintenance
ActivityMaintained
ResponsivenessNo recent community issues