Mallory MCP Server

mallorymcpwas a local MCP server you ran viauvx/pipthat proxied the Mallory API to your AI client over stdio. It is no longer published with new features and will receive no further updates.

All functionality now lives in theMallory Remote MCP service, a hosted endpoint you connect your AI client to directly. It exposes the same threat intelligence capabilities (vulnerabilities, threat actors, malware, exploits, organizations, attack patterns, breaches, products, advisories, stories, mentions, search, and sources) without any local package to install or keep up to date.

Follow the setup guide for your AI client (Cursor, Claude Desktop, Claude Code, and others) here:

Once you've connected the Remote MCP service, you can remove the local server from your MCP client config and uninstall this package:

CVE database and vulnerability intelligence for AI agents. Search NIST NVD, check software security, find known vulnerabilities — no API key required.

Real-time CVE lookup via NIST NVD 2.0, CISA KEV alerts, EPSS exploitation probability, and MITRE ATT&CK mappings. 7 tools for AI-powered vulnerability assessment.

Exploit Intelligence Platform MCP Server

An MCP (Model Context Protocol) server that gives AI assistants access to the Exploit Intelligence Platform — hundreds of thousands of vulnerabilities and exploits from NVD, CISA KEV, VulnCheck KEV, InTheWild.io, ENISA EUVD, OSV.dev, EPSS, ExploitDB, Metasploit, GitHub, and more. I

The NVD CVE MCP Server is a powerful security research tool

Analyze the entire cybersecurity market, products and companies with a single prompt

An Elasticsearch server focused on security and threat analysis. Requires a valid Elasticsearch license (trial, platinum, or enterprise) for connection.

Integrates with the OpenCTI platform to query and retrieve threat intelligence data.

Interface with Malware Bazaar to get real-time threat intelligence and sample metadata for cybersecurity research.

MCP-native OSINT framework for AI agents. Exposes 9 intelligence tools (email enumeration, username search, breach check, WHOIS, IP intel, subdomain enum, dorks, paste search, phone intel) via Model Context Protocol. Also works as a standalone Python CLI.