#malware

Threat intelligence MCP server for SOC analysts, DFIR and security researchers. Scan and enrich IOCs directly from Claude, Cursor or any MCP client: IP addresses (IPv4/IPv6), domains, file hashes and blockchain addresses. Search CVEs by keyword, vendor or product, retrieve full CVE records, and explore a threat actor database (APTs, groups, TTPs) with reverse CVE-to-actor lookup. Includes scan history, bookmarks and quota management. Free tier available — no credit card required. Built by mlab.sh, the IOC & file intelligence platform.

The Interplanetary File System (IPFS) MCP toolkit gives AI Agents and automated workflows the ability to utilize IPFS as a backend storage medium. Upload, retrieve, pin, and manage encrypted files on IPFS via a simple API accessible as MCP tools.

AI-powered URL safety checker for agents. Returns SAFE/SUSPICIOUS/DANGEROUS verdict using Google Web Risk and Google Safe Browsing before any agent fetches an untrusted URL.

SafeDep MCP Server protects AI coding agents from supply chain attacks by checking every open source package before installation. When your AI suggests a package, SafeDep validates it against our threat intelligence database, built from continuous scanning, behavioral analysis, and human security researcher verification. Malicious packages are blocked instantly. Safe packages install without friction. We detect threats in hours, not the 24-48 hours it takes for public disclosure. Same intelligence that caught Shai-Hulud and S1ngularity.

Unofficial VirusTotal MCP Server

A Model Context Protocol (MCP) server for interacting with Joe Sandbox Cloud. This server exposes rich analysis and IOC extraction capabilities from Joe Sandbox and integrates cleanly into any MCP-compatible application (e.g. Claude Desktop, Glama, or custom LLM agents).

An MCP server for the open source MISP project

An comprehensive MCP Server for PE File Analysis

An AI-driven MCP server that autonomously interfaces with Malware Bazaar, delivering real-time threat intel and sample metadata for authorized cybersecurity research workflows.

A Model Context Protocol (MCP) server that integrates with the MISP (Malware Information Sharing Platform) to provide threat intelligence capabilities to Large Language Models.

Secure MCP server for analyzing Excel files with oletools