"Known" matching MCP servers:

Enables checking IP addresses against the GreyNoise API to determine if they are internet background noise, known benign services, or potentially targeted threats.

Enables AI assistants to autonomously investigate and manage Sophos Channel Server incidents by connecting via SSH, checking Zabbix alerts, searching Jira, pattern matching known root causes, and creating LINFRA tickets.

A safety guard for AI assistants that inspects actions (file reads, queries, etc.) and classifies them as SAFE, SUSPICIOUS, or BLOCK with explanations, using both known-attack patterns and behavior-based zero-day detection.

An MCP server that scans your lockfiles (npm, PyPI, Go, Rust, Ruby, PHP) for known vulnerabilities, enriches with EPSS exploit probability scores, and recommends fix versions. $14/mo — not per-seat.

Enables CVE lookups and risk assessment by integrating CISA Known Exploited Vulnerabilities (KEV) data and CVSS metrics. It helps users prioritize patching efforts by ranking vulnerabilities based on exploitation status and calculated risk scores.

Enables ingesting caller-supplied agent execution traces and comparing them against signed, versioned baselines of normal behaviour to surface silent drift. Reports severity with per-dimension attribution, a replayable exemplar episode, and visible suppression of declared maintenance windows or known change markers.

Read-only MCP server providing Microsoft 365 service health status and known incident/outage information from Microsoft Graph. Enables quick answers to whether an issue is a widespread Microsoft outage or specific to a tenant.