threat intelligence MCP servers

"threat intelligence" matching MCP servers:

• Threat Intelligence MCP Server

  marc-shade

  A

  security

  F

  license

  A

  quality

  Aggregates real-time threat intelligence from multiple sources including Feodo Tracker, URLhaus, CISA KEV, and ThreatFox, with IP/hash reputation checking via VirusTotal, AbuseIPDB, and Shodan for comprehensive security monitoring.

  Last updated a month ago

  11

• Abuse.ch Threat Intelligence

  lokallost

  -

  security

  A

  license

  -

  quality

  Enables querying threat intelligence data about files, URLs, IPs, and domains from multiple abuse.ch platforms (MalwareBazaar, URLhaus, and ThreatFox) through a unified API. Provides comprehensive security reports and threat analysis data for cybersecurity investigations.

  Last updated 5 months ago

  2

  MIT

• Chaitin IP Intelligence Search

  co0ontty

  -

  security

  F

  license

  -

  quality

  Enables checking IP reputations and threat intelligence by querying Chaitin's global honeypot network and millions of defense nodes. Provides real-time IP profiling, malicious behavior detection, and threat alerts based on aggregated security data.

  Last updated 10 months ago

  8

  2

• Data Intelligence MCP Server

  hingaibm

  -

  security

  A

  license

  -

  quality

  Provides secure integration between MCP clients and IBM Data Intelligence services, enabling AI assistants to interact with IBM's data intelligence capabilities for data management and analytics operations.

  Last updated 2 months ago

  Apache 2.0

• Threat.Zone MCP Server

  threat-zone

  A

  security

  A

  license

  A

  quality

  Provides LLMs with access to Threat.Zone's malware analysis capabilities through standardized MCP tools, allowing for file and URL analysis, sandbox execution, and threat intelligence retrieval.

  Last updated 7 months ago

  31

  13

  GPL 3.0

• MCP Threat Intel Server

  aplaceforallmystuff

  -

  security

  A

  license

  -

  quality

  Provides unified access to multiple threat intelligence sources like AlienVault OTX, AbuseIPDB, and GreyNoise for security research and analysis. It enables users to perform simultaneous lookups on IPs, domains, hashes, and URLs across several platforms within a single response.

  Last updated a month ago

  15

  1

  MIT