広告掲載
MCP.so
ログイン

Mlab - IOC & Threat Intelligence MCP Server

@mlab-sh

リポジトリ

基本情報

カテゴリ

開発者ツール

トランスポート

stdio

作者

mlab-sh

投稿者

Alice Snow

Mlab - IOC & Threat Intelligence MCP Server について

Threat intelligence MCP server for SOC analysts, DFIR and security researchers. Scan and enrich IOCs directly from Claude, Cursor or any MCP client: IP addresses (IPv4/IPv6), domains, file hashes and blockchain addresses. Search CVEs by keyword, vendor or product, retrieve full C

#security#threat-intelligence#ioc#cybersecurity#cve#vulnerability#malware#soc#dfir#osint#ip-reputation#threat-actors

Mlab - IOC & Threat Intelligence MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "mlab": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://mlab.sh/mcp",
        "--header",
        "Authorization: Bearer mcp_xxx"
      ]
    }
  }
}

Mlab - IOC & Threat Intelligence MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

上のボタンで一時的なサンドボックスでこのサーバーを実行し、ツール一覧を取得できます。

概要

What is Mlab - IOC & Threat Intelligence?

Mlab - IOC & Threat Intelligence is a remote MCP server that connects MCP-compatible clients like Claude and Cursor to the mlab.sh platform, providing real-time IOC scanning, vulnerability intelligence, and threat actor research for SOC analysts, DFIR teams, and security researchers. No local installation is required — it operates as a remote server accessible via a URL.

How to use Mlab - IOC & Threat Intelligence?

Configure your MCP client to point to the remote server URL https://mlab.sh/mcp and authenticate with a Mlab account (free tier available). For Claude Desktop, add the URL to claude_desktop_config.json under mcpServers. For Claude.ai (web), add it as a custom connector under Settings → Connectors. For other MCP clients, add a remote MCP server and authenticate.

Key features of Mlab - IOC & Threat Intelligence

  • 17 tools covering IOC scanning, CVE search, and threat actors
  • Auto-detect indicator type with detect_ioc
  • Full domain scans and IP enrichment
  • Reverse CVE lookup for threat actors
  • Workspace bookmarks, scan history, and account info
  • Remote server — no npm or Docker needed

Use cases of Mlab - IOC & Threat Intelligence

  • Incident triage: extract IOCs from logs and check each against Mlab
  • Vulnerability watch: search critical CVEs and discover which actors exploit them
  • Threat actor research: build briefs on APT groups with TTPs and aliases
  • Real-time intelligence queries via AI assistant

よくある質問

1

Do I need to install anything locally?

No. Mlab is a remote MCP server — zero npm, zero Docker, just a URL.

2

How do I authenticate and is there a free tier?

Authentication is done with a Mlab account. A free tier is available with no credit card required; quotas apply per organization.

3

What tools are available?

The server provides 17 tools including `detect_ioc`, `scan_ip`, `start_domain_scan`, `get_domain_scan_results`, `scan_crypto`, `cve_search`, `cve_detail`, `actors_by_cve`, `search_actors`, `get_actor`, `add_bookmark`, `remove_bookmark`, `get_bookmarks`, `get_scan_history`, `get_scan_limits`, `get_account_info`, and `hello_world`.

4

How can I check my remaining scan quotas?

Use the `get_scan_limits` tool to view your remaining scan quotas.

5

What are the system requirements?

A MCP-compatible client (e.g., Claude Desktop, Claude.ai, Cursor) and internet access. No local dependencies.

コメント

「開発者ツール」の他のコンテンツ

Mythex

Mythex

Remote MCP server for Mythex, an AI app builder. Claude, Cursor or Codex get a cloud sandbox to build full-stack apps: files and bash, live preview, Postgres database, file storage, secrets, checkpoints, browser tests an

SSH MCP Server

hypnosis

SSH MCP server for AI agents: remote commands, file transfer, log search and server audits through OpenSSH.

1

Foremerge

naw103

Catch intent conflicts before code conflicts. The open-source coordination protocol for coding agents, built above Git.

50

CircleCI MCP Server

CircleCI

Manage CI/CD pipelines, debug failed builds, and optimize test suites directly from your AI agents - no terminal required. The CircleCI MCP Server is a remote server hosted by CircleCI that connects AI tools and agents

Termany

thinkany-ai

Agent-Native Terminal

174
広告掲載