MCP servers and skills: search, filter by where they run, and compare.
AI-powered threat hunting and incident response MCP server for Elasticsearch/OpenSearch
PythonGPL-3.0★ 204No key
Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting
OfficialPythonMIT★ 273No key
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
PythonMIT★ 66No key
MCP server wrapping the Hayabusa Windows event log forensic analysis CLI for AI-assisted threat hunting.
PythonMIT★ 1Few starsNo key
SOC operations woven with 800+ security skills, ML detection & MITRE ATT&CK — open-source AI-native SOC platform
PythonMIT★ 1Few starsNo key
MCP server for the F6 XDR platform — gives AI assistants access to alerts, incidents, mail, files and hosts
PythonApache-2.0★ 1Few starsNo key
MCP server for CrowdStrike Falcon — AI-powered threat hunting, EDR investigation, RTR, and SOC automation via Claude
PythonMITFew starsNo key
MCP server for AlienVault OTX / LevelBlue Open Threat Exchange — complete DirectConnect API coverage (29 tools), stdio + streamable HTTP transports, read-only by default. Built on MCP SDK 2.x
PythonMIT★ 1Few starsNeeds a key
MCP server for Alert Logic MDR — AI-powered incident response, SQL log search, SOAR automation, and SOC workflows via Claude
PythonMITFew starsNo key
Open-source MCP server for defensive security: intel ingestion → research → hunting → detection drafts
PythonMIT★ 5No key
Who stands behind it
