MCP Radar
Servidor MCP

Malwagon

com.malwagon/malwagon
Seguridad Público y accesible MCP 2025-11-25

Qué hace este MCP

Submits URLs, commands, packages, or hashes to a malware sandbox and retrieves scan status, reports, hashes, and observed indicators.

Capacidades

Herramientas

5 herramientas
get_report
Read an analysis report
The derived analysis report for one scan: verdict, capabilities, behaviour summary, observed operations and defanged indicators. Derived data only - it never contains the sample's bytes, its decompiled source, a download link or an artifact reference. Every list in the result reports what was returned, counted and truncated. Answers 'not found' for a scan that does not exist and for one this token may not read, identically.
Solo lectura
Esquema de entrada 
{'type': 'object', 'required': ['scan_id'], 'properties': {'scan_id': {'type': 'integer', 'description': "The scan's numeric id."}}, 'additionalProperties': False}
lookup_hash
Look up a SHA-256
Find analyses of a known SHA-256 digest. Returns the caller's own scans of those bytes plus any publicly shared scan of them. Sends nothing anywhere: this searches scans that already exist on this platform. Answers with an empty list when the hash is unknown or not visible to this token, without distinguishing the two.
Solo lectura
Esquema de entrada 
{'type': 'object', 'required': ['sha256'], 'properties': {'sha256': {'type': 'string', 'maxLength': 64, 'minLength': 64, 'description': 'A 64 character hex SHA-256 digest.'}}, 'additionalProperties': False}
Esquema de salida 
{'type': 'object', 'required': ['sha256', 'scans'], 'properties': {'scans': {'type': 'object', 'required': ['items', 'returned', 'total', 'truncated'], 'properties': {'items': {'type': 'array'}, 'total': {'type': 'integer'}, 'returned': {'type': 'integer'}, 'truncated': {'type': 'boolean'}}, 'description': 'A bounded list: items plus what was returned, counted and cut.'}, 'sha256': {'type': 'string'}}}
poll_scan
Poll a scan's progress
The current status of one scan, for polling after submit_scan. Cheap enough to call in a loop. 'terminal' means the scan will not change again; 'report_available' means get_report will return a full report. Answers 'not found' for an unknown scan and an unreadable one identically.
Solo lectura
Esquema de entrada 
{'type': 'object', 'required': ['scan_id'], 'properties': {'scan_id': {'type': 'integer', 'description': "The scan's numeric id."}}, 'additionalProperties': False}
Esquema de salida 
{'type': 'object', 'properties': {'mime': {'type': ['string', 'null']}, 'size': {'type': ['integer', 'null']}, 'tags': {'type': 'object'}, 'score': {'type': ['integer', 'null']}, 'module': {'type': 'string'}, 'sha256': {'type': ['string', 'null']}, 'status': {'type': 'string'}, 'scan_id': {'type': 'integer'}, 'verdict': {'type': ['string', 'null']}, 'terminal': {'type': 'boolean'}, 'finished_at': {'type': ['string', 'null']}, 'submitted_at': {'type': ['string', 'null']}, 'report_available': {'type': 'boolean'}}}
search_indicator
Search for an indicator
Find scans where an indicator was observed: an IP, a domain, a URL, a mutex, a registry key, a hash or a JA3/JA4 fingerprint. The indicator is matched exactly; defanged input such as 'evil[.]com' is refanged first. Only scans this token may read are searched.
Solo lectura
Esquema de entrada 
{'type': 'object', 'required': ['indicator'], 'properties': {'type': {'type': 'string', 'description': 'Optional indicator type to narrow the search: ip, domain, url, md5, sha1, sha256, imphash, mutex, registry, filepath, email, ja3, ja4, user_agent.'}, 'indicator': {'type': 'string', 'maxLength': 512, 'description': 'The exact indicator value. Defanged forms are accepted.'}}, 'additionalProperties': False}
Esquema de salida 
{'type': 'object', 'required': ['indicator', 'matches'], 'properties': {'matches': {'type': 'object', 'required': ['items', 'returned', 'total', 'truncated'], 'properties': {'items': {'type': 'array'}, 'total': {'type': 'integer'}, 'returned': {'type': 'integer'}, 'truncated': {'type': 'boolean'}}, 'description': 'A bounded list: items plus what was returned, counted and cut.'}, 'indicator': {'type': 'string'}}}
submit_scan
Submit a scan
Queue a new analysis of a target that can be named as text: a SHA-256 to look up, a URL to visit, a command to run, or a package to install. Uploading a file or a document is not possible over MCP. This spends the account's own credits and is subject to its plan limits. Poll the returned scan_id with poll_scan, then read it with get_report.
Acceso externo
Esquema de entrada 
{'type': 'object', 'required': ['module', 'target'], 'properties': {'module': {'enum': ['hash', 'url', 'command', 'package'], 'type': 'string', 'description': 'hash: look up a SHA-256. url: visit a URL in a browser VM. command: run a command line in a Windows VM. package: install a package in a Linux VM. url and package detonate with internet access and are refused on a plan that does not include it.'}, 'target': {'type': 'string', 'maxLength': 2048, 'description': 'The digest, URL, command line or package specifier, matching the chosen module.'}, 'private': {'type': 'boolean', 'description': 'Keep the scan off the public corpus. Free plans cannot make a scan private and this is ignored for them.'}}, 'additionalProperties': False}
Esquema de salida 
{'type': 'object', 'properties': {'mime': {'type': ['string', 'null']}, 'size': {'type': ['integer', 'null']}, 'tags': {'type': 'object'}, 'score': {'type': ['integer', 'null']}, 'module': {'type': 'string'}, 'sha256': {'type': ['string', 'null']}, 'status': {'type': 'string'}, 'scan_id': {'type': 'integer'}, 'verdict': {'type': ['string', 'null']}, 'terminal': {'type': 'boolean'}, 'finished_at': {'type': ['string', 'null']}, 'submitted_at': {'type': ['string', 'null']}, 'report_available': {'type': 'boolean'}}}
Historial

Cambios recientes en herramientas

Añadido
submit_scan
17 de September de 2026 a las 12:36
Añadido
poll_scan
17 de September de 2026 a las 12:36
Añadido
search_indicator
17 de September de 2026 a las 12:36
Añadido
get_report
17 de September de 2026 a las 12:36
Añadido
lookup_hash
17 de September de 2026 a las 12:36
Descubrir

Servidores MCP similares

osint-terminal

com.thetempleofdoom.osint-mcp/osint-terminal

Provides keyless OSINT and reconnaissance tools for domains, DNS, IPs, breach exposure, threat intelligence, and related lookups.

AIMEAT

io.aimeat/aimeat

Provides a self-hosted agent operating system with agent work delegation, access controls, federation, hooks, SSO, security admin…

hyperion

com.thetempleofdoom.hyperion/hyperion

Acts as a paid MCP tool marketplace and utility gateway with server discovery, HTTP and JavaScript tools, research, data conversi…

Vee3

io.github.Vee3io/vee3

Manages Clerk authentication infrastructure, including users, organizations, domains, sessions, tokens, OAuth, SSO, machines, per…

BorealHost

ai.borealhost/mcp

Provides web hosting and infrastructure management, including site deployment, DNS, domains, containers, compute, backups, cachin…

Proof Holdings

holdings.proof/mcp-server

Provides domain verification, identity and delegation proofs, human approval workflows, trusted-contact challenges, and controlle…

GoCreative Agent API

io.github.ColinHughes2121/gocreative-agent-api

Offers pay-per-call LLM completions and data services for company intelligence, KYB, sanctions screening, threat intelligence, co…

Japan Public Ledgers MCP

com.mcp-revenue-empire/japan-public-ledgers

Provides agent identity, memory, audit, trust, proxy, temporary email, webhook, CAPTCHA, and alerting capabilities alongside publ…