Mmcp.market

Malwagon MCP server

by malwagon.com·com.malwagon/malwagon·v1.1.0
No reviews yet

Submit files and URLs to a malware sandbox, poll scans, fetch reports, hashes and IOCs.

C67/100grade C
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
C67/100

full report

Adoption
New

Little public usage data yet

Reviews

Write one

Nobody has reviewed Malwagon yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Malwagon tools (5, 1 write)

write = sends, deletes, buys or posts
  • get_reportFree

    The derived analysis report for one scan: verdict, capabilities, behaviour summary, observed operations and defanged indicators. Derived data only - it never contains the sample's bytes, its decompiled source, a download link or an artifact reference. Every list in the result reports what was returned, counted and truncated. Answers 'not found' for a scan that does not exist and for one this token may not read, identically.

  • lookup_hashFree

    Find analyses of a known SHA-256 digest. Returns the caller's own scans of those bytes plus any publicly shared scan of them. Sends nothing anywhere: this searches scans that already exist on this platform. Answers with an empty list when the hash is unknown or not visible to this token, without distinguishing the two.

  • poll_scanFree

    The current status of one scan, for polling after submit_scan. Cheap enough to call in a loop. 'terminal' means the scan will not change again; 'report_available' means get_report will return a full report. Answers 'not found' for an unknown scan and an unreadable one identically.

  • search_indicatorFree

    Find scans where an indicator was observed: an IP, a domain, a URL, a mutex, a registry key, a hash or a JA3/JA4 fingerprint. The indicator is matched exactly; defanged input such as 'evil[.]com' is refanged first. Only scans this token may read are searched.

  • submit_scanwrite actionFree

    Queue a new analysis of a target that can be named as text: a SHA-256 to look up, a URL to visit, a command to run, or a package to install. Uploading a file or a document is not possible over MCP. This spends the account's own credits and is subject to its plan limits. Poll the returned scan_id with poll_scan, then read it with get_report.

Public scan report

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

1 low
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 1770ms20/20
  • Tool poisoning5 tool descriptions checked15/15
  • Auth qualityAPI key sent as a header8/15
  • Maintenanceno repository listed3/15
  • Maintainer identityverified namespace with website, no repo4/10

Findings (1)

  • lowNo source repository listedmaint.no-repo
Overall 67/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

claude mcp add --transport http malwagon https://malwagon.com/mcp
Add to Cursor

Malwagon: common questions

Is Malwagon MCP server safe?
With care: it is graded C, so read the findings first (67/100). Read the Malwagon safety report
How do I install Malwagon?
It runs remotely at malwagon.com. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Malwagon need an API key?
Yes. The registry entry asks for Authorization.
Is Malwagon maintained?
The latest release is v1.1.0.
Is Malwagon up?
100% of our last 6 checks got an answer. We check remote servers about four times a day.

More from malwagon.com →