Polarity

Connects to your self-hosted Polarity instance to run threat intelligence lookups and parse indicators of compromise directly from Claude. You'd use this when you're analyzing security data or investigating potential threats and need to query your Polarity integrations without switching contexts. The server handles both real-time lookups against your configured threat feeds and IOC extraction from unstructured text. Requires you to run your own Polarity deployment, so this is aimed at security teams already invested in that platform who want to integrate their threat intel workflows into their AI-assisted analysis work.