Best Alternatives to ZettelForge
Looking for an alternative to ZettelForge? Whether you need a different runtime environment, custom authentication support, or alternative API integrations in the Knowledge & Memory ecosystem, we have cataloged and compared the top alternative MCP servers below.
ZettelForge Overview
The ZettelForge MCP server gives Claude Code access to agentic memory for cyber threat intelligence, including extracted CVEs, actors, IOCs, and ATT&CK techniques. It builds a STIX 2.1 knowledge graph, resolves actor aliases, and combines vector retrieval with graph traversal. Storage and processing run in-process using SQLite and LanceDB, with optional local LLM support through Ollama or other configured providers. Reach for it when analysts need searchable investigation context that can run without cloud services or API keys.
- Store analyst notes with extracted CTI entities
- Recall prior investigations by actor, IOC, CVE, or technique
- Resolve threat-actor aliases across reports
- Synthesize findings from accumulated intelligence
Specification Matrix: ZettelForge vs Alternatives
Direct comparison of key metrics, runtimes, authentication methods, and community popularity.
| Server Name | Runtime | Auth | Pricing | GitHub Stars | Downloads | Action |
|---|---|---|---|---|---|---|
| uvx | β | β | 66 | β | Current | |
| npx | No auth required | Free | 48,368 | 1 | ||
| uvx | No auth required | Freemium | 4,536 | β | ||
| uvx | β | β | 1,257 | β | ||
| npx | No auth required | Free | 91,878 | 3 | ||
| uvx | β | β | 493 | β | ||
| npx | API key | Free | 59,942 | β | ||
| npx | No auth required | Free | 1,595 | β | ||
| uvx | API key | Free | 4,525 | β | ||
| npx | No auth required | Free | 322 | β | ||
| npx | No auth required | Free | 373 | β | ||
| npx | No auth required | Free | 1 | β | ||
| npx | No auth required | Free | 373 | β |