Skip to main content
Glama
69,184 servers. Last updated

Matching MCP tools:

Matching MCP Connectors:

"Information about Threat Intelligence" matching MCP servers:

  • A
    license
    A
    quality
    C
    maintenance
    Aggregates real-time threat intelligence from multiple sources including Feodo Tracker, URLhaus, CISA KEV, and ThreatFox, with IP/hash reputation checking via VirusTotal, AbuseIPDB, and Shodan for comprehensive security monitoring.
    Last updated
    11
    193
    MIT
  • A
    license
    -
    quality
    F
    maintenance
    Extends Veeam Intelligence to MCP-compatible clients, enabling secure, real-time operational insight across Veeam Backup & Replication, Veeam ONE, and VSPC via natural language or AI workflows.
    Last updated
    10
    MIT
  • F
    license
    -
    quality
    C
    maintenance
    Enables AI assistants to query software supply chain compliance data, including asset status, security vulnerabilities, and evidence lineage. It allows for natural language analysis of compliance posture, policy violations, and deployment blockers across an organization.
    Last updated
  • A
    license
    A
    quality
    F
    maintenance
    Enables AI assistants to interact with Rapid7 InsightIDR SIEM for investigating incidents, searching logs with LEQL, managing alerts and assets, analyzing user behavior, and handling threat intelligence.
    Last updated
    26
    25
    4
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    Enables AI-driven SOC investigations by providing automated Splunk querying, threat intelligence enrichment, and response actions through natural language. Includes tools for IP pivoting, lateral movement detection, and label harvesting.
    Last updated
    31
    1
    Apache 2.0
  • A
    license
    B
    quality
    A
    maintenance
    An MCP server that enables LLMs to analyze pcap files by providing tools for packet dissection, stream following, and data extraction via tshark. It supports protocol hierarchy analysis, credential scanning, and threat intelligence checks on captured network traffic.
    Last updated
    51
    185
    MIT
  • A
    license
    D
    quality
    B
    maintenance
    A Model Context Protocol server that provides AI agents with controlled read access to Datalust Seq instances for log analysis and monitoring. It enables agents to search events, execute data queries, and retrieve information about signals, dashboards, and alerts.
    Last updated
    100
    2
    MIT
  • A
    license
    -
    quality
    C
    maintenance
    Provides Claude Desktop access to Defense.com threat intelligence data for risk assessment, threat analysis, and workload management. It also features interactive security training tools and supports over 200 source type aliases for simplified querying.
    Last updated
    3
    MIT
  • A
    license
    -
    quality
    A
    maintenance
    Enables natural language threat hunting and incident response by connecting LLMs to enterprise security data sources like Elasticsearch, EVTX logs, PCAP files, and Velociraptor.
    Last updated
    204
    GPL 3.0
  • A
    license
    -
    quality
    B
    maintenance
    Enables natural language interaction with Wazuh SIEM for alert querying, threat hunting, vulnerability scanning, and active response actions.
    Last updated
    MIT
  • A
    license
    -
    quality
    D
    maintenance
    AI-powered threat intelligence server with real-time alert monitoring and multi-source IOC analysis, enabling security investigations directly in Claude Desktop.
    Last updated
    Apache 2.0
  • A
    license
    -
    quality
    C
    maintenance
    Analyzes PCAP/PCAPNG network capture files to detect port scanning techniques (SYN, FIN, Xmas), classify scan patterns, and enrich suspicious IP addresses with threat intelligence data. Provides comprehensive network security analysis through natural language interactions.
    Last updated
    MIT
  • A
    license
    -
    quality
    D
    maintenance
    Enables integration with Datadog APIs to monitor and retrieve information about monitors, metrics, dashboards, logs, events, and incidents through the Model Context Protocol.
    Last updated
    2,091
    MIT