Google Security Operations and Threat Intelligence MCP Server is a collection of Model Context Protocol servers that let compatible AI clients access Google security, threat intelligence, cloud security, and response products. Security teams use the servers for threat detection, investigation, hunting, orchestration, and risk management, with each server enabled separately.
Skill Claude CodeCodex ✓ vendor
Expert guidance for proactive threat hunting. Use this when the user asks to "hunt" for threads, IOCs, or specific TTPs.
Skill Claude CodeCodex ✓ vendor
Expert guidance for deep security investigations. Use this when the user asks to "investigate" a case, entity, or incident.
Skill Claude CodeCodex ✓ vendor
Helps the user configure the Google SecOps Remote MCP Server for Antigravity. Use this when the user asks to "set up" or "configure" the security tools for Antigravity.
Skill Claude CodeCodex ✓ vendor
Helps the user configure the Google SecOps Remote MCP Server for Gemini CLI. Use this when the user asks to "set up" or "configure" the security tools for Gemini CLI.
Skill Claude CodeCodex ✓ vendor
Expert guidance for security alert triage. Use this when the user asks to "triage" an alert or case.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: