Brandefense MCP
Claude connectorCommunityPut Brandefense Inside Your AI Agent - Investigate incidents, pull threat intel, and generate reports without leaving your agent.
Brandefense connects Claude to the Brandefense external threat intelligence platform, so you can investigate and respond to external cyber risks without leaving the conversation.
What you can do:
- Triage incidents: list and filter brand protection and security incidents, review evidence and indicators, assign them, add notes, and change their status
- Explore threat intelligence: threat actors, campaigns, CVEs, exploits, and the CVEs that affect your assets
- Search dark web, breach, and leak sources for domains, email addresses, keywords, and usernames, and look up IPs, URLs, and file hashes
- Inspect your external attack surface: assets, subdomains, IP addresses, open ports, SSL certificates, websites, and findings
- Run on-demand domain scans and start phishing site and social media account takedowns
- Create reports, work with dashboards, and export audit logs
- Manage assets, policies, users, and teams
How access works: Sign in with your existing Brandefense account. Claude can only see and do what your account already can: Brandefense checks your role, team, modules, and licenses on every request. MSSP users keep access to the customer organizations they already manage. Access to AI assistant connections is controlled in your organization's Brandefense settings, and you can disconnect Claude at any time.
Some tools change data or take external action, such as status changes, user management, credit-spending searches and scans, and takedown requests. These tools are annotated as write actions.
Requires an active Brandefense subscription.
- Tools
- 128
exposed by this connector
Movement
From our daily snapshots over the last 30 days.
Rank by popularity
Rank by trending score
Popularity score
Trending score
In its category
How this connector compares with others in the same category. Positions are counted within the category, not across the whole directory.
Data analytics955th of 2,740 by popularity · 373rd of 1,228 by trending score
| # | Connector | Popularity | Trending | 7d |
|---|---|---|---|---|
| 953 | 7,087 | — | 55places down | |
| 954 | 7,087 | 9,272 #1001 | 164places down | |
| 955 | 7,077 | 22,395 #373 | 11places up | |
| 956 | 7,066 | 12,169 #840 | 210places down | |
| 957 | 7,055 | — | 6places up |
| # | Connector | Trending | Popularity | 7d |
|---|---|---|---|---|
| 371 | 22,423 | 4,807 #1582 | — | |
| 372 | 22,423 | 4,524 #1664 | — | |
| 373 | 22,395 | 7,077 #955 | 209places down | |
| 374 | 22,395 | 5,170 #1496 | 230places up | |
| 375 | 22,320 | 12,175 #169 | 94places down |
Also on other marketplaces
Tools
- activate_user
- add_incident_evidence_attachment
- add_incident_note
- ask_analyst_question
- asm_scan_history
- asset_detail
- asset_list
- assign_incident
- assign_incident_by_name
- bulk_assign
- bulk_change_status
- bulk_export_incidents
- bulk_export_indicators
- change_asset_status
- change_incident_status
- close_eligible_incidents
- create_asset
- create_custom_investigation
Show all 128Show fewer
- create_policy
- create_team
- create_user
- cve_affected_assets
- cve_detail
- cve_exploits
- cve_list
- cve_references
- dashboard_widget_data
- dashboard_widget_save
- dashboard_widgets_list
- deactivate_user
- delete_team
- delete_user
- edit_asset
- edit_organization_details
- edit_policy
- edit_team
- edit_user
- enable_auto_phishing_takedown
- estimate_custom_investigation_credit
- estimate_investigation_credit
- estimate_securesnap_credit
- estimate_threat_search_credit
- export_audit_logs
- export_changelogs
- export_compromised_devices
- export_consolidated_indicators
- export_incident
- export_incident_indicators
- export_report_history
- export_scheduled_reports
- generate_incident_report
- get_changelog
- incident_detail
- incident_purchased_data
- incident_related
- incidents_list
- intelligence_detail
- intelligences_list
- list_asm_findings
- list_changed_whois
- list_combosquats
- list_credit_history
- list_dns_records
- list_exposed_files
- list_exposed_panels
- list_incident_assignees
- list_incident_indicators
- list_insecure_websites
- list_ip_addresses
- list_long_running_takedowns
- list_malicious_ads
- list_mobile_apps
- list_modules
- list_organization_users
- list_organizations
- list_phishing_sites
- list_phishing_takedown_brands
- list_policies
- list_ports
- list_ransomware_groups
- list_ransomware_victims
- list_securesnap_scans
- list_social_media_accounts
- list_ssl_certificates
- list_subdomains
- list_team_members
- list_teams
- list_technologies
- list_threat_actor_campaigns
- list_threat_actors
- list_tld_risk
- list_weak_tls_certificates
- list_websites
- list_whois
- needs_your_attention
- phishing_site_detail
- phishing_stats
- phishing_takedown_detail
- ping
- ransomware_victim_detail
- remove_assignee
- report_create
- report_status
- reports_list
- run_securesnap_scan
- search_blackhole_domain
- search_blackhole_email
- search_blackhole_keyword
- search_blackhole_username
- search_darkweb
- search_phishing_sites
- search_social_media_accounts
- search_threat_hash
- search_threat_ip
- search_threat_url
- security_briefing
- start_phishing_takedown
- start_social_media_takedown
- suggest_regex
- takedown_duration_stats
- test_regex
- validate_regex
- view_audit_logs
- view_changelogs
- view_organization_details
- view_policy
- view_team_details
- whoami
- Categories
- Made by
- Brandefense INC · Website
- Sign-in
- Required
- Connector URL
- https://mcp.brandefense.io/plugins/mcp
- Transport
- Streamable HTTP
- Works with
- Claude, Claude API, Claude Code, Claude Desktop
- Added
- September 22, 2026
- More info
- Sponsorship
- Promote this connector