blue-team MCP servers

5 tagged blue-team, measured the same way as everything else here.

Browse within: cybersecurity 5

RamiBotAI/ramibot

MCP server Claude CodeCodexCursor +2

MCP server "rami-kali-docker-local" as configured in RamiBotAI/ramibot. Runs in Docker (/opt/rami-kali/mcp_server.py).

not rated 29 7mo ago A tokens not measured original MIT

huntable-cti-studio

02

dfirtnt/Huntable-CTI-Studio

MCP server Claude CodeCodexCursor +2

MCP server "huntable-cti-studio" as configured in dfirtnt/Huntable-CTI-Studio. Launched with bash scripts/run_mcp_server.sh.

not rated 11 today A tokens not measured original MIT

mcp-server-malcolm

03

nagameTW/mcp-server-malcolm

MCP server Claude CodeCodexCursor +2

MCP server for the Malcolm network traffic analysis platform (Zeek + Suricata + Arkime + OpenSearch + NetBox) — full read surface plus opt-in, audited write tools. Runs locally from the mcp-server-malcolm Python package.

not rated 2 6d ago A tokens not measured original MIT

badchars/living-off-the-land-lolbins-mcp-server

MCP server Claude CodeCodexCursor +2

Living off the Land binaries MCP server — GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, LOLESXi, LOTP, LOLC2, WADComs intelligence with attack graph reasoning, privilege escalation paths, defense evasion, detection engineering. Runs locally from the living-off-the-land-lolbins-mcp-server npm package.

not rated 1 19d ago A tokens not measured original MIT

hayabusa

05

omeryemba/mcp-hayabusa

MCP server Claude CodeCodexCursor +2

MCP server "hayabusa" as configured in omeryemba/mcp-hayabusa. Launched with mcp-hayabusa.

not rated 1 2mo ago A tokens not measured original MIT