MCP Catalog

MalwarebazaarOfficial

MalwareBazaar MCP — abuse.ch malware sample database (free, key required)

Mitre AttckOfficial

MITRE ATT&CK adversary TTPs (STIX bundles)

Mitre CweOfficial

MITRE Common Weakness Enumeration (CWE) API

Nist BeaconOfficial

NIST Randomness Beacon v2 — signed public random pulses every 60s.

nvdOfficial

NVD MCP — wraps the NIST National Vulnerability Database API (free, no auth)

Open SanctionsOfficial

OpenSanctions MCP — Global sanctions and PEP data (free, no auth required)

OsvOfficial

OSV.dev (Open Source Vulnerabilities) MCP.

OwaspOfficial

OWASP MCP — keyless.

PasswordOfficial

Password strength analysis MCP.

PasswordgenOfficial

Secure password generator MCP.

PhishtankOfficial

PhishTank MCP — wraps PhishTank API (checkurl.phishtank.com)

Public Suffix ListOfficial

Mozilla Public Suffix List — eTLD parser (cached 24h)

PulsediveOfficial

Pulsedive MCP — threat-intelligence IOC enrichment (pulsedive.com)

RdapOfficial

RDAP — Registration Data Access Protocol (domains, IPs, ASNs) via IANA bootstrap

Ripe StatOfficial

RIPE Stat MCP — IP/ASN/BGP data

Security FeedsOfficial

Security Feeds MCP.

SecuritytrailsOfficial

SecurityTrails MCP — wraps SecurityTrails API (securitytrails.com)

ShodanOfficial

Shodan MCP — wraps the full Shodan REST API (api.shodan.io)

Shodan InternetdbOfficial

Shodan InternetDB MCP — wraps Shodan InternetDB (internetdb.shodan.io)

Spdx LicenseOfficial

SPDX open-source license list with full text

ThreatfoxOfficial

ThreatFox MCP — abuse.ch indicator-of-compromise feed (free, key required)

TrademarksOfficial

Trademarks MCP — USPTO TSDR trademark lookup

UrlhausOfficial

URLhaus MCP — wraps abuse.ch URLhaus malware URL database (free, no auth)

Urlscan IoOfficial

urlscan.io URL scanner — search/result keyless, submit needs key