- Eidolon @sudohnim/eidolonPrivacy-first OSINT scanner: breaches, credentials, Shodan, username sweep. Scored PDF report.23% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.1 GitHub stars.
- OSINT MCP @rjn32s/osint-mcp26 free OSINT tools as MCP tools for AI agents. Auto-installs everything on first run.22% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Pwntools @daedalus/mcp-pwntoolsMCP server exposing pwntools 4.15.0 functionality for binary exploitation19% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Pymetasploit3 @daedalus/mcp-pymetasploit3MCP server for Metasploit Framework via pymetasploit340% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- GreyNoise @mrfentmen/greynoise-mcpMCP server for GreyNoise: IP noise classification, tags. Free key.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- BlackDome Threat Intel @blackdome-ai/blackdome-mcpLive honeypot threat intel: attacker IPs, IOCs, credentials, payloads, actors.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- OSINT Toolbox @renkagod/osint-toolbox-mcpRun Sherlock, Maigret, Holehe, GHunt, theHarvester, SpiderFoot and more OSINT tools locally11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- AbuseIPDB @mrfentmen/abuseipdb-mcpMCP server for AbuseIPDB: IP abuse reports, reputation. Free key.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- ZeroDOM @devhusnainai/zerodomDeterministic DOM perception for AppSec red teams and AI agents: live Chrome, attack-surface scans.16% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- isMalicious threat intelligence for AI agents @ismalicious/mcp-serverReputation of IPs, domains, URLs, hashes, emails and phones; CVE lookups; prompt-injection scans10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Truesignal @rudrendupaul/truesignalWraps the truesignal CLI as a single generic MCP tool for threat/connector status checks.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Intelthreadlinqs @threadlinqs/intelthreadlinqs-mcpThreadlinqs threat-intelligence MCP — 73 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- RelayShield Security Intelligence @nzdsf2-gif/relayshield-mcpBreach, SIM swap, infostealer, domain lookalikes, MCP registry risk, prompt-injection detection.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- GreyNoise @nickjlucker/greynoiseMCP server for GreyNoise API - Check if IPs are internet background noise or targeted attacks4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Agentic Detection Lookups @detection-forge/agentic-detection-lookupsLOLBAS, GTFOBins, and process parent-child lookups for detection engineering agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- Rqwstr @kjopstad-it/rqwstrAI-native HTTP security testing MCP server — 17 tools with raw HTTP/1.1 + HTTP/2 control16% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- MITRE ATLAS @csoai-org/mitre-atlas-mcpMITRE ATLAS — Adversarial Threat Landscape for AI Systems. Tactics + techniques for attacking AI...16% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Dark Search Protocol @parnasheps-eng/dark-search-protocol161 dark data sources, 25+ domains, 6-step pipeline, Streamable HTTP + stdio11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Fray — WAF Security Testing MCP Server @dalisecurity/frayWAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI30% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Update Hijack Demo @nottiboy137/update-hijack-demoDemo: Server update hijack PoC (clean copy for video)47% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Keyboardcrumbs MCP @keyboardcrumbs/mcpLive threat intel for Claude — CVE, KEV predictions, IP lookup, malware hashes. Free, no API key.14% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Polarity @radar989/polarity-mcpReal-time threat intelligence lookups and IOC parsing from your self-hosted Polarity instance.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Malware Patrol Threat Intelligence MCP server @andrec10002/mcp-server-threat-intelligenceOur MCP Server connects AI workflows to current, curated cyber threat intelligence8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
