PhishTank MCP — wraps PhishTank API (checkurl.phishtank.com)
45 MCP servers
Security Feeds MCP.
SecurityTrails MCP — wraps SecurityTrails API (securitytrails.com)
ThreatFox MCP — abuse.ch indicator-of-compromise feed (free, key required)
Sigstore Rekor — the public transparency log for software signatures.
bug-bounty-programs
ClearlyDefined — the licence, copyright attribution and provenance actually found inside an…
crt.sh — Certificate Transparency log search
Feodo Tracker MCP — botnet C&C IP blocklist from abuse.ch.
SANS Internet Storm Center (ISC) MCP.
NIST Standards MCP pack
NVD MCP — wraps the NIST National Vulnerability Database API.
OSV.dev (Open Source Vulnerabilities) MCP.
FIRST.org EPSS (Exploit Prediction Scoring System) MCP.
MalwareBazaar MCP — abuse.ch malware sample database (free, key required)
OSV.dev — Google's open-source vulnerability database
Password strength analysis MCP.
Sanctions Screening MCP — screen people, companies, vessels, and aircraft
sanctions.io MCP — wraps the sanctions.io Screening API (api.sanctions.io)
SEON MCP — wraps the SEON fraud / digital-footprint enrichment APIs (seon.io)
XposedOrNot MCP — free breach-exposure lookup by email.