← Back to directory
COMPARE UP TO 4 SERVERS

Compare MCP servers

Compare scores, permissions, risks, and fit in one decision-focused table.

DimensionCrowdsentinel MCP ServerAI-powered threat hunting & incident response MCP server for Elasticsearch/OpenSearch.ChEMBL MCP ServerUnofficial MCP server providing advanced access to the ChEMBL chemical database
FMRS59 / 100 · C75 / 100 · B
Reliability8 / 2012 / 20
Security and permissions12 / 2016 / 20
Maintenance13 / 2014 / 20
Documentation12 / 2018 / 20
Setup experience14 / 2015 / 20
Best for
  • Security analysts conducting threat hunting in Elasticsearch or OpenSearch environments
  • Incident responders needing AI-assisted investigation workflows
  • Red teams/security testers analyzing attack simulation data
  • Researchers using cyber range environments like crowdsentinel-range
  • Drug discovery and computational chemistry researchers
  • Bioinformatics teams needing ChEMBL data through AI assistants
  • Developers comfortable with Node.js or Docker
Not for
  • Production environments (explicitly warned not for production)
  • Users without security background (targets DFIR professionals)
  • Users needing Splunk integration (still on roadmap)
  • Users relying on a single data source (integrates with multiple)
  • Production settings requiring official ChEMBL support (this is unofficial)
  • Users without a Node.js or Docker environment
  • General database tasks unrelated to ChEMBL
Required permissions
  • Requires Elasticsearch/OpenSearch credentials (API key or username/password)
  • Can read and write Elasticsearch indices (can be restricted via DISABLE_HIGH_RISK_OPERATIONS)
  • Optional API keys for external threat intelligence services (VirusTotal, Shodan, etc.)
  • Requires local system permissions to run tools like osquery and tshark
  • Requires Velociraptor API configuration for endpoint forensics
  • Outbound network access to https://www.ebi.ac.uk/chembl/api/data
  • Read-only access to public API data; no authentication credentials required
Risks and side effects
  • High-risk operations: can create/delete indices, documents, data streams, and aliases
  • Potential sensitive data exposure: searches may return documents containing PII or sensitive security data
  • TLS verification disabled by default (VERIFY_CERTS default false), risk of man-in-the-middle attacks
  • External service dependencies: requires access to threat intelligence APIs, may incur costs or rate limits
  • Active development status: APIs may change, not suitable for production
  • Unofficial project with license marked NOASSERTION (README claims MIT); verify licensing yourself
  • Data accuracy depends on the ChEMBL REST API and the server's parsing may contain defects
  • 30-second request timeouts may constrain large batch queries
  • README inconsistency on tool count (22 vs 27) raises documentation reliability concerns
Supported clientsClaude Code, Claude Desktop, VS Code, Cursor, Roo Code, 5ireClaude Desktop
Tools027