What is the best alternative to Misp MCP Server?

The top-rated alternatives to Misp MCP Server in the Security category include MCP Virustotal, MCP Audit, Agentward. These servers offer complementary or alternative capabilities depending on your deployment stack and authentication requirements.

How do Misp MCP Server alternatives differ in installation and runtime?

Misp MCP Server and its alternatives vary by runtime requirement (Node.js/npx, Python/uvx, Docker, or remote HTTP/SSE endpoints). Check the specification comparison table above to verify command requirements before installing.

Are alternatives to Misp MCP Server free and open source?

Most MCP servers listed on AllMCPs are open source tools under MIT or Apache licenses that you can self-host or run locally with Claude Desktop, Cursor, VS Code, or Windsurf.

How do I side-by-side compare Misp MCP Server with a specific alternative?

Click the "Compare side-by-side →" button on any alternative card to see an in-depth comparison matrix covering feature lists, stars, npm downloads, install configurations, and schema specifications.

Security• MCP Alternatives Guide

Best Alternatives to Misp MCP Server

Looking for an alternative to Misp MCP Server? Whether you need a different runtime environment, custom authentication support, or alternative API integrations in the Security ecosystem, we have cataloged and compared the top alternative MCP servers below.

Browse all Security servers →View Misp MCP Server Specs →

Target Reference Server

Misp MCP Server Overview

This stdio MCP server connects an LLM client to a MISP instance for read-only access to events, attributes, tags, feeds, and galaxies. It scans every outgoing MISP response for prompt-injection, XSS, and shell-injection patterns before returning it. Use it when agents need threat-intelligence lookups without mutation access.

Primary Use Cases for Misp MCP Server:

Server Name	Runtime	Auth	Pricing	GitHub Stars	Downloads	Action
Misp MCP Server (Target)	npx	API key	Free	2	—	Current
MCP Virustotal	npx	API key	Bring your own API key (usage-based cost)	149	—	Compare →
MCP Audit	npx	No auth required	Free	7	—	Compare →
Agentward	uvx	No auth required	Free	19	—	Compare →
Shield	npx	No auth required	Free	11	—	Compare →
Shellward	npx	No auth required	Free	136	—	Compare →
Mobb Vibe Shield MCP	npx	API key	Bring your own API key (usage-based cost)	69	—	Compare →
Agentaegis MCP	Remote (SSE)	API key	Freemium	1	—	Compare →
MCP Firewall	npx	No auth required	Free	4	—	Compare →
Scamverify MCP	npx	API key	Freemium	1	—	Compare →
Kastell	npx	No auth required	Free	59	—	Compare →
MCP Shield	npx	No auth required	Free	2	—	Compare →
Volta MCP Server	npx	No auth required	Free	1	—	Compare →

Detailed Evaluation of Misp MCP Server Alternatives

MCP Virustotal

Runtime: npx

Queries VirusTotal for URL, file-hash, IP, and domain reports, relationships, behavior summaries, and threat collections.

Key Features:

URL, file, IP, and domain reports

Paginated relationship queries

VirusTotal corpus search

3 0 149

Compare side-by-side

MCP Audit

Runtime: npx

Proxies MCP traffic to add signed audits, redaction, policies, rate limits, and a local read-only dashboard.

Key Features:

Stdio and HTTP MCP proxying

JSONL and SQLite audit storage

HMAC-SHA256 audit signing

3 0 7

Compare side-by-side

Agentward

Runtime: uvx

Enforces YAML permissions on agent tool calls, inspects sensitive data and tool chains, and records audit trails.

Key Features:

YAML policy enforcement

PII and PHI classification

Dangerous tool-chain detection

4 0 19

Compare side-by-side

Shield

Runtime: npx

Local MCP proxy that blocks risky agent actions, scans tool traffic, pins catalogs, and supports approvals and audit logs.

Key Features:

Pre-execution MCP call guardrails

TOFU tool-catalog pinning

Tool description and result scanning

4 0 11

Compare side-by-side

Shellward

Runtime: npx

Screens projects for China-specific compliance risks and adds runtime checks for injections, sensitive data, paths, tools, and commands.

Key Features:

Stdio MCP server with local execution

Prompt injection detection for Chinese and English text

PII, credential, and sensitive-data scanning

3 0 136

Compare side-by-side

Mobb Vibe Shield MCP

Runtime: npx

Automates security vulnerability remediation by analyzing SAST reports or scanning repos, providing fix recommendations via MCP.

Key Features:

Supports SAST tools: Checkmarx, CodeQL, Fortify, Snyk

Two modes: Scan (runs SAST scan) and Analyze (uses existing SAST report)

Generates automated code fixes for detected vulnerabilities

2 0 69

Compare side-by-side

Agentaegis MCP

Runtime: Remote (SSE)

Scans MCP plugins, agent skills, endpoints, code, networks, and configurations for security and compliance risks.

Key Features:

MCP plugin and skill supply-chain scanning

Endpoint PROCEED/CAUTION/BLOCK verdicts

Network, web application, code, and dependency scans

3 0 1

Compare side-by-side

MCP Firewall

Runtime: npx

Intercepts MCP traffic with YAML policies, secret scanning, response filtering, and JSON Lines audit logs.

Key Features:

YAML-based inbound and outbound policies

Secret scanning with regex and entropy checks

Response redaction and prompt-injection blocking

5 0 4

Compare side-by-side

Scamverify MCP

Runtime: npx

Checks phones, URLs, messages, emails, documents, and QR codes against threat intelligence and returns risk findings.

Key Features:

Phone and URL threat lookups

Text and email phishing analysis

Document and QR code verification

3 0 1

Compare side-by-side

Kastell

Runtime: npx

Audits and hardens Linux servers, manages cloud infrastructure, and exposes security operations through MCP tools.

Key Features:

Server security audits with remediation

SSH hardening and fail2ban setup

UFW firewall management

4 0 59

Compare side-by-side

MCP Shield

Runtime: npx

Scans MCP server packages and directories for malicious code, prompt injection, and supply chain risks.

Key Features:

Scans npm packages for malicious patterns

Scans local JavaScript and TypeScript directories

Detects exfiltration, code execution, obfuscation, and sensitive file access

2 0 2

Compare side-by-side

Volta MCP Server

Runtime: npx

Creates and reads AES-256-GCM encrypted, one-time Volta Notes for credential handoff between users and AI agents.

Key Features:

Create AES-256-GCM encrypted notes

Read and permanently destroy notes

Keep decryption keys in URL fragments

3 0 1

Compare side-by-side

Best Alternatives to Misp MCP Server

Misp MCP Server Overview

Specification Matrix: Misp MCP Server vs Alternatives

Detailed Evaluation of Misp MCP Server Alternatives

MCP Virustotal

MCP Audit

Agentward

Shield

Shellward

Mobb Vibe Shield MCP

Agentaegis MCP

MCP Firewall

Scamverify MCP

Kastell

MCP Shield

Volta MCP Server

Frequently Asked Questions: Misp MCP Server Alternatives