"Querying Elasticsearch (ES)" matching MCP servers:

Enables comprehensive interaction with Elasticsearch APIs through natural language queries, specifically optimized for security analysis, threat detection, incident investigation, and compliance monitoring with advanced machine learning capabilities for anomaly detection.

Enables querying Microsoft Entra first-party application scope metadata, including searching applications by name, ID, scope, and FOCI/public-client status.

MCP server for interacting with the ThreatLocker Portal API, enabling querying of computers, applications, policies, audit logs, and more through AI assistants.

Enables querying and analyzing a legacy, file-based vulnerability registry via MCP tools for CVE lookup, search, vendor navigation, and aggregate statistics.

Enables querying AbuseIPDB threat intelligence via natural language, including IP reputation checks, subnet scans, and abuse report retrieval.

Enables querying Red Hat security data including CSAF advisories, CVEs, and OVAL streams through natural language.

MCP server for querying CVE and package vulnerability data from NVD and OSV.dev, allowing CVE lookups and dependency scanning.

PII sanitization layer for autonomous AI agent pipelines. Detects and redacts emails, phone numbers, national IDs, private keys, and financial data before text reaches LLMs. Supports EN, ES (LATAM), PT (BR/PT), DE, JA.

Enables querying the WPScan API for WordPress plugin, theme, core vulnerabilities, and specific vulnerability lookups through MCP tools.

Enables verification of MCP tool definitions against a signed public transparency log, and querying of historical changes and server metadata.

MCP server for querying the ZoomEye API

A Model Context Protocol server that enables querying and analyzing Wazuh security logs stored in OpenSearch, with features for searching alerts, getting detailed information, generating statistics, and visualizing trends.

A local stdio MCP server that enables coding agents to discover credential handles and create scoped action requests with local approval and sanitized output.

An implementation of the Model Context Protocol server that enables AI models to communicate with Edge Security Acceleration (ESA) services, allowing models to manage routines, deployments, routes, records, and sites through standardized protocols.

Connects AI assistants to VulnCheck vulnerability intelligence for querying CVEs, exploits, advisories, and vulnerable packages via natural language.

Enables querying GitHub Security Advisories from a local cloned advisory database using tools like list_advisories and get_advisory.

Enables assistants to inspect tamper-evident AI agent action journals through read-only verification, event querying, and policy-rule explanation.

Enables querying traffic-quality statistics, managing reports, and downloading IP/UA risk databases via MCP.

A ready-to-deploy MCP server with in-process agent verification via KYA-OS Checkpoint, enabling secure tool access for verified agents.

Provides secure live database querying, schema inspection, AWS S3 security audits, and Cloudflare infrastructure control through MCP tools.

An MCP server that provides Truss threat intelligence capabilities, enabling natural language search, FilterQL filtering, and querying of threat data, along with STIX export and detection rule generation.

Enables querying the Sigstore Rekor public transparency log to retrieve entries by index or UUID, search by artifact hash or email, and inspect signing certificates and inclusion proofs.

Let LLMs analyze sensitive data safely by querying a tokenized, join-preserving copy of the database, with fail-closed PII scanning and provable numeric equivalence.

Provides 129 MCP tools for querying and managing Hillstone StoneOS firewalls, enabling AI assistants to perform network operations through natural language.

Enables querying the CISA Known Exploited Vulnerabilities catalog, including full entries, single CVE lookups, distinct vendors, and recently added vulnerabilities.

Enables querying SAP Security Note metadata including Patch Day releases, CVSS scores, CVEs, affected components, and actively-exploited status via the Model Context Protocol.

MCP server for sovereign US legal workflows, providing Ed25519-signed manifests and offline-capable access via your own infrastructure.

Local macOS MCP server for Calendar and Reminders that gives each AI agent its own token and access to only the calendars and reminder lists you choose, per action. Writes can require your approval in a panel that shows every field.

A sovereign, MIT-licensed MCP server that provides cryptographically signed notarization for listings, benchmarks, and transactions using Ed25519. It runs offline on user infrastructure as a free alternative to SaaS notary tools.

MCP server for OSIDB (Red Hat Product Security's vulnerability management system). Enables read-only querying of flaws, affects, trackers, and status via natural language from MCP clients like Cursor or Claude Desktop.