Scan IPs, domains, URLs, or file hashes using VirusTotal's 70+ antivirus engines and threat intelligence. Auto-detects input type for streamlined analysis.
MIT
402,350 tools. Last updated 2026-08-06 14:20
"Information about Threat Intelligence" matching MCP tools:
- Query VirusTotal for threat intelligence on a file hash. Get detection results from 70+ antivirus engines, file metadata, and behavioral analysis to validate suspicious files or enrich IOCs.MIT
- Search and browse threat actors to discover recent additions, filter by name or UUID, and generate threat intelligence reports with pagination and sorting options.Apache 2.0
- Monitor recent threat actor activities mentioned in threat intelligence sources to track emerging threats, identify active actors, and build situational awareness of the current threat landscape.Apache 2.0
- Query VirusTotal for domain threat intelligence including reputation, WHOIS, DNS, and detection results from 90+ security vendors. Investigate suspicious domains in incident response.MIT
- Retrieve detailed intelligence about specific threat actors or APT groups to understand their tactics, techniques, procedures, target sectors, and tools used for security research and incident analysis.Apache 2.0
Matching MCP Servers
- FlicenseAqualityCmaintenanceAn MCP server that provides information about Utkarsh, including bio, skills, work experience, and portfolio projects, accessible via local stdio or remote HTTP with OAuth.Last updated6
- Alicense-qualityCmaintenanceServes any STRIDE threat model to MCP-capable LLMs, enabling natural language querying of threat registers and export to the Microsoft Threat Modeling Tool.Last updatedMIT
Matching MCP Connectors
CVE intelligence, STRIDE, OWASP test cases via Ansvar Gateway. Cited, OAuth + paid.
Live stock information
- Query VirusTotal to retrieve comprehensive threat intelligence and reputation for any URL, including detection results from 90+ security vendors.MIT
- Get anonymized threat intelligence feed showing attack patterns detected across the Novyx network. Filter by lookback hours and minimum severity.MIT
- Retrieve threat intelligence data for a URL to identify malicious activity and security threats.Apache 2.0
- Get overall threat intelligence statistics: total signatures, active threats, mitigated count, and severity breakdown.MIT
- Record threat events to enable cross-tenant intelligence. Fingerprints, deduplicates, and integrates into shared threat network.MIT
- Retrieve threat intelligence information about a file using its MD5, SHA1, or SHA256 hash.Apache 2.0
- Retrieve threat intelligence for a CVE using AlienVault OTX, including related pulses and indicators.MIT
- Retrieve threat intelligence for a domain, including pulse info, whois data, and reputation scores from AlienVault OTX.MIT
- Retrieve threat intelligence for an IP address from VirusTotal, including reputation scores, geolocation, and network ownership for investigating suspicious activity.MIT
- Retrieve threat intelligence for any IPv4 address, including reputation, associated pulses, country, and ASN, using AlienVault OTX data.MIT
- Retrieves SolSentry system-wide threat intelligence statistics including total scans, accuracy, resolve rate, operator counts, and bot clusters for network health assessment.MIT
- Retrieve threat intelligence data about a web domain to evaluate its risk and security reputation.Apache 2.0
- Retrieve threat intelligence data for any IP address to assess its security posture and potential risks.Apache 2.0
- Retrieve threat intelligence for file hashes using AlienVault OTX. Supports MD5, SHA1, and SHA256.MIT