"ANA" matching MCP servers:

Enables auditing emails for internal contradictions and reporting detected incoherences with literal textual evidence, without issuing a phishing verdict.

Analyzes raw email headers and emails for phishing, spoofing, and BEC using AI forensics, SPF/DKIM/DMARC/ARC validation, and IP reputation checks. Exposes analyze_email, get_analysis, and list_analyses as MCP tools.

Enables local inspection and analysis of Wi-Fi PCAP and PCAPNG files through tools for loading captures, summarizing them, filtering packets, and dissecting packet details.

Scans projects for hardcoded secrets, unprotected .env files, and console.log leaks to prevent credential exposure.

This server acts as a Portal (zero-trust Policy Enforcement Point) for AI agents. Every tool call is attested, measured against a sealed cryptographic reference, and logged to a tamper-evident continuity chain with signed receipts.

Enables AI assistants to access real-time threat intelligence, malware sample metadata, and security analysis tools via integration with MalwareBazaar, VirusTotal, and Telegram.

Paid remote MCP gate for caller identity, agent scope, task intent, data class, policy verdicts, and audit receipts.

Analyzes password strength with entropy calculation and crack time estimation. Supports pay-per-call payments via x402 (USDC on Base L2) without requiring API keys or signup.

Enables analytics agents to run validated read-only SQL against a warehouse API with enforced row limits, required JSON responses, and secret-safe audit metadata.

Enables AI agents to discover and execute tools via a secure MCP server with JWT authentication, RBAC, rate limiting, and audit logging.

An MCP server for automated AWS security scanning. It detects over-privileged IAM roles and S3 Public Access Block misconfigurations, enabling least-privilege enforcement through tools like list_iam_roles, analyze_iam_policy, and analyze_s3_security.

Enables natural language analysis of network packet captures, including protocol detection, flow analysis, and security threat identification, integrated with AI assistants.

MCP server for AI agent compliance that screens actions before execution and records decisions in an immutable, SIEM-ready audit trail.

Provides real-time threat intelligence and malware metadata by integrating with MalwareBazaar and VirusTotal APIs. Users can search for IOCs, analyze local file hashes, and access data transformation tools for defensive security research.

Provides code auditing tools including repository cloning, AST analysis, security scanning with Semgrep, and LLM-powered code explanations via the Model Context Protocol.

Python-based MCP server for full-cycle incident management, enabling detection, root-cause analysis, and response guidance through tools like detect_incidents, analyze_incident, and suggest_response.

Enables comprehensive ransomware threat analysis through 25+ tools that interact with ransomware.live API. Provides real-time data on ransomware groups, victims, negotiations, IOCs, and attack trends for cybersecurity investigation and monitoring.

Exposes nine governed analytics tools — attrition, headcount, tenure, salary, promotion, and more — plus a restricted read-only SQL execution path, so an HR analyst's plain-English question resolves to a versioned, reproducible method instead of free-form LLM-written SQL. Tool selection is driven by the LLM, while role-based access control, PII screening, SQL guards, result validation, and audit logging keep every answer within policy.

An MCP server that lets AI assistants analyze Burp Suite XML exports offline, without running Burp. Provides 19 tools for mapping endpoints, finding secrets, detecting vulnerabilities, analyzing headers, exporting curl commands, and generating pentest reports.

Assists in Advanced Persistent Threat malware analysis by providing tools to securely download samples via jump servers using SSH and SCP. It enables automated retrieval of remote files through a multi-hop configuration for analysis workflows.