Google Threat Intelligence MCP Server

Example Use Cases

• 1

  Perform threat intelligence searches on campaigns, threat actors, and malware families.

• 2

  Analyze files, domains, IP addresses, and URLs for security reputations and behavior.

• 3

  Deploy a scalable, centralized threat intelligence service with per-user API key management.

Description

This MCP server enables AI assistants and clients to interact with Google's Threat Intelligence suite through local or cloud deployment. It supports comprehensive threat intelligence features such as searching campaigns, threat actors, malware families, and analyzing files, domains, IPs, and URLs. The server can be deployed locally for development or centrally on Cloud Run for scalable team use, maintaining individual API key management and secure access.