Search and browse threat actors to discover recent additions, filter by name or UUID, and generate threat intelligence reports with pagination and sorting options.
Apache 2.0
180,147 tools. Last updated 2026-06-05 14:58
"Information about Threat Intelligence" matching MCP tools:
- Monitor recent threat actor activities mentioned in threat intelligence sources to track emerging threats, identify active actors, and build situational awareness of the current threat landscape.Apache 2.0
- Retrieve detailed intelligence about specific threat actors or APT groups to understand their tactics, techniques, procedures, target sectors, and tools used for security research and incident analysis.Apache 2.0
- Retrieve threat intelligence data for a URL to identify malicious activity and security threats.Apache 2.0
- Check IP addresses, domains, URLs, or file hashes against VirusTotal's 70+ antivirus engines and threat intelligence. Automatically detects input type for immediate analysis.MIT
- Retrieve threat intelligence information about a file using its MD5, SHA1, or SHA256 hash.Apache 2.0
Matching MCP Servers
- AlicenseAqualityCmaintenanceAggregates real-time threat intelligence from multiple sources including Feodo Tracker, URLhaus, CISA KEV, and ThreatFox, with IP/hash reputation checking via VirusTotal, AbuseIPDB, and Shodan for comprehensive security monitoring.Last updated1127MIT
- Flicense-qualityCmaintenanceEnables querying threat intelligence data about files, URLs, IPs, and domains from multiple abuse.ch platforms (MalwareBazaar, URLhaus, and ThreatFox) through a unified API. Provides comprehensive security reports and threat analysis data for cybersecurity investigations.Last updated2
Matching MCP Connectors
CVE intelligence, STRIDE, OWASP test cases via Ansvar Gateway. Cited, OAuth + paid.
Jeevesus saves. Threat-intel MCP, 17.9M docs, 1.13M IOCs. Search · enrich · STIX. Read-only.
- Retrieve threat intelligence data about a web domain to evaluate its risk and security reputation.Apache 2.0
- Retrieve threat intelligence data for any IP address to assess its security posture and potential risks.Apache 2.0
- Retrieves SolSentry system-wide threat intelligence statistics including total scans, accuracy, resolve rate, operator counts, and bot clusters for network health assessment.MIT
- Search threats in Google Threat Intelligence using a query. Filter by type (threat actor, malware, campaign, vulnerability) and sort results to find relevant intelligence.
- Retrieve ML-recommended threat objects (actors, malware, campaigns) tied to a threat profile, enabling focused threat intelligence for targeted industries and regions.
- Search for threat actors by query in Google Threat Intelligence. Sort results by relevance or creation date.
- Match captured URLs and hostnames against URLhaus threat intelligence to identify threats in pcap files.MIT
- Check file hashes against threat intelligence to identify malicious files and enhance security monitoring.MIT
- Retrieve a list of Threat Profiles to filter Google's threat intelligence by target industry or region, focusing on threats relevant to your organization.
- Retrieve statistics on threat intelligence data and cache status to monitor security information from multiple sources.MIT
- Analyze a URL to receive a comprehensive threat intelligence report covering reputation and security insights.
- Clear cached threat intelligence data to force retrieval of fresh security information from multiple sources for accurate monitoring.MIT
- Analyze an IP address to retrieve a comprehensive threat intelligence report from Google, revealing insights and reputation.
- Aggregate threat intelligence data from multiple security sources for dashboard visualization and security monitoring.MIT