- isMalicious threat intelligence for AI agents @ismalicious/mcp-serverReputation of IPs, domains, URLs, hashes, emails and phones; CVE lookups; prompt-injection scans10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Truesignal @rudrendupaul/truesignalWraps the truesignal CLI as a single generic MCP tool for threat/connector status checks.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- HackMyIP — no-key IP intelligence @0xvibly/hackmyip-mcpFree no-key IP intelligence: geolocation, VPN detection, DNS, WHOIS, blacklists, breach checks15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Truss Threat Intelligence @truss-security/truss-mcpQuery Truss threat intelligence via hosted MCP (OAuth). Growth+ plans.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Intelthreadlinqs @threadlinqs/intelthreadlinqs-mcpThreadlinqs threat-intelligence MCP — 73 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- TweetFeed @0xdaniellopez/tweetfeedIOCs (URLs, domains, IPs, hashes) shared by the infosec community on X/Twitter. No auth, CC0.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- vuln-intel @rozetyp/vuln-intelFree hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports19% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Abuseipdb @pipeworx-io/abuseipdbAbuseIPDB MCP — wraps AbuseIPDB v2 API (api.abuseipdb.com/api/v2)8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- RelayShield Security Intelligence @nzdsf2-gif/relayshield-mcpBreach, SIM swap, infostealer, domain lookalikes, MCP registry risk, prompt-injection detection.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- GreyNoise @nickjlucker/greynoiseMCP server for GreyNoise API - Check if IPs are internet background noise or targeted attacks4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Agentic Detection Lookups @detection-forge/agentic-detection-lookupsLOLBAS, GTFOBins, and process parent-child lookups for detection engineering agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- Rqwstr @kjopstad-it/rqwstrAI-native HTTP security testing MCP server — 17 tools with raw HTTP/1.1 + HTTP/2 control16% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Cybersecurity Threat Intelligence MCP @foundrynet/cyber-intel-mcpCVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- MITRE ATLAS @csoai-org/mitre-atlas-mcpMITRE ATLAS — Adversarial Threat Landscape for AI Systems. Tactics + techniques for attacking AI...16% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Alienvault Otx @pipeworx-io/alienvault-otxAlienVault OTX MCP — Open Threat Exchange (free with key)8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Oracle42 Intelligence @mintmas/oracle42-intelligenceAI-powered threat intelligence, smart contract auditing, and cybersecurity OSINT.18% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Nullcone Threat Intelligence @maco144/nullconeReal-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Domain Intel @lazymac2x/domain-intelCloudflare Workers MCP server: domain-intel6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- ScanMalware.com URL Scanner @scanmalware/scanmalware-mcpMCP server for ScanMalware.com URL scanning, malware detection, and analysis.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Scry @tunnelmind/scryFree IPv4 lookups against a distributed attacker-observation corpus.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Cyber Library @cyberlibrary/librarySearch and read Cyber Library, a free structured cybersecurity knowledge base. Read-only, no auth.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Dragons Eye Ransomware Claims @ransomware-tracker/dragonseyePay-per-call ransomware leak-site claim lookups, recent claims and group profiles (x402 USDC).16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Vara MCP — Field Intelligence Scan Server @kushkillerjsixx66/vara-mcp-serverGoverned external-environment scanning: signal harvest, Field Intel Reports, per-signal lineage.Not assessed yet.A remote server; no sign-in.
- TLPT @tooloracle/tlptTLPTOracle — 17-tool TIBER-EU TLPT framework: scope, threat intel, scenarios, reports.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
