# Threat intelligence

The Mallory MCP Server is a server that provides real-time network threat intelligence and supports proxy access to network security-related information such as vulnerabilities, threat actors, and malware.

An ATT&CK knowledge base query service based on the MCP protocol, providing functions for retrieving attack techniques and tactics, querying mitigation measures, and detection methods.

ADEO CTI MCP Server is a network security analysis platform integrating Shodan and VirusTotal APIs, providing comprehensive threat intelligence and asset analysis functions.

The OpenCTI MCP Server is a threat intelligence query server that provides standardized interfaces and supports various threat intelligence operations and system management functions.

The ExploitDB MCP Server is a Model Context Protocol server that provides security vulnerability query services, supporting searching for vulnerability information by keywords, CVE numbers, etc., and includes functions such as vulnerability details, statistical data, and automatic updates.

The OpenCTI MCP Server is a Model Context Protocol server integrated with the OpenCTI platform, providing a standardized threat intelligence query interface that supports various functions such as report retrieval, malware search, and user management.

The ORKL MCP Server is a Model Context Protocol server for querying the ORKL API, providing tools for obtaining and analyzing threat intelligence reports, threat actors, and sources.