lidless-labs

Maltego MCP server: an LLM authors .mtgx OSINT graphs and runs whois/DNS/ASN/crt.sh lookups for threat intel

MCP server for the MITRE ATT&CK knowledge base: map alerts to techniques, profile threat groups, analyze detection coverage, and enrich SOC workflows from an AI client.

MCP server for Wazuh SIEM/XDR: query alerts, agents, vulnerabilities, and rules from Claude or any AI client. Read-only.

MCP server for Cortex (StrangeBee/TheHive): run analyzers and responders, enrich observables, and triage threats with AI.

MCP server for Zeek + Suricata network security monitoring logs. Query, hunt, and correlate NSM telemetry from an AI client.

MCP server for MISP threat intelligence: IOC lookups, event management, correlation, and exports for AI agents and Claude

n8nctrl operator control CLI for n8n workflow ops, with MCP and OpenClaw adapters for agents.

adguardctrl operator control CLI for AdGuard Home, with an MCP adapter and back-compatible adguard-mcp launcher.