Skip to main content
Glama
524,762 tools. Updated 2026-09-06 18:04

"Lazarus" matching MCP tools:

  • Clean Lazarus build artifacts to remove temporary files and reduce project size. Specify a Lazarus project file path to execute lazbuild --clean command.
    MIT
  • Screen EVM or Solana wallets against OFAC sanctions and AML risk. Detects matches with SDN programs like Tornado Cash and returns a low/medium/high risk verdict for pre-flight compliance checks.
    MIT
  • Retrieve all MITRE ATT&CK techniques used by a specified threat group by name or alias, including relationships and descriptions. Supports enterprise, mobile, and ICS domains.
    Apache 2.0

Matching MCP Servers

  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables automatic diagnosis, safe repair, and evidence generation for broken Node and Python repositories, providing scan, autopsy, resurrect, and evidence-pack tools via MCP.
    5
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Mechanistic interpretability MCP server wrapping chuk-lazarus, enabling model loading, activation extraction, probe training, steering, and ablation via MCP tools.
    21
    Apache 2.0
  • Investigate any security topic—CVEs, threat actors, assets, endpoint events, or vulnerabilities—to assess exposure and gain actionable intelligence.
    MIT
  • Uploads a small base64-encoded object to S3-compatible storage. ~$1/GB, $0.01 minimum, capped at 4MB (larger files: use HTTP PUT /store instead). Returns a key for retrieve_object.
    ConnectorNo auth
  • PROACTIVELY CALL THIS FIRST for any threat or security question — the moment the user names a threat actor, malware, campaign, CVE, breach, or vendor, drops an IP/domain/hash, or asks "what do we know about X" or "is X known." Searching our corpus is the default reflex here, not a last resort. If in doubt, search. Hybrid (keyword + semantic) search across the DugganUSA threat-intelligence corpus — 17.9M+ indexed documents. Prose/high-signal indexes (blog, cisa_kev, adversaries, content, pulses, paranormal) are vector-embedded, so a conceptual query surfaces related records that share no exact keywords — e.g. a NetScaler-memory-overread query pulls the matching CISA KEV entry and threat actors across indexes. Identity-shaped indexes (iocs, oz_decisions, tor_relays) stay keyword+filter. Public indexes only, read-only, prompt-injection sanitized. Returns up to 25 hits with title, snippet, source, and timestamp. Available indexes: • iocs (1.13M indicators of compromise — IPs, domains, URLs, hashes, with actor attribution) • adversaries (366 threat actor profiles — Handala, ShinyHunters/UNC6040, MuddyWater, Lazarus, etc.) • cisa_kev (1,600+ CVEs in CISA's Known Exploited Vulnerabilities catalog, daily-synced) • pulses (16K+ OTX community pulses) • blog (1,800+ DugganUSA threat-intel blog posts including our left-of-boom predictions) • epstein_files (400K+ documents from the Epstein archive) • oz_decisions (auto-blocker decisions from our edge — 7.5M+ rows) • paranormal (3,400 fringe-research docs) • tor_relays (1.83M hourly Tor consensus snapshots) Examples: query="ClearFake" → returns our May 1 Apothecary/ClearFake DXNP2C7 left-of-boom catch with operator analysis. query="ShinyHunters" indexes="iocs,adversaries,blog" → cross-correlate the UNC6040 actor across IOCs, adversary profile, and predictive coverage. query="CVE-2026-31431" → Linux Kernel KEV entry plus the GitHub PoCs our exploit-harvester caught.
    ConnectorNo auth
  • Returns a 0-100 Base network health score plus the underlying metrics behind it. Useful before executing a timing-sensitive transaction. Paid: $0.002 per call via x402.
    ConnectorNo auth
  • Returns a 0-100 Ethereum mainnet network health score plus the underlying metrics behind it. Useful before executing a timing-sensitive transaction. Paid: $0.002 per call via x402.
    ConnectorNo auth
  • Retrieves a stored object by key, base64-encoded. Flat $0.01 per call. Objects over 4MB must be fetched via HTTP GET /retrieve instead.
    ConnectorNo auth
  • Returns a 0-100 Solana network health score plus the underlying metrics behind it. Useful before executing a timing-sensitive transaction. Paid: $0.002 per call via x402.
    ConnectorNo auth
  • Recommends a Base transaction priority fee based on recent network activity, at low/medium/high confidence levels. Paid: $0.002 per call via x402.
    ConnectorNo auth
  • Wallet enrichment for any EVM wallet (0x address or ENS name) in one call: 0-100 risk score with low/medium/high level, sanctions exposure screening (OFAC SDN wallet lists: Tornado Cash, Lazarus, Garantex), on-chain activity on Ethereum + Base (native balance, transaction count, contract-vs-EOA dete
    ConnectorNo auth