Malware Sandbox MCP
by mukul975
Detonate files & URLs in cloud malware sandboxes (Hybrid Analysis, tria.ge, ANY.RUN) and enrich IOCs across MalwareBazaar, ThreatFox, URLhaus, Feodo, URLScan & VirusTotal — straight from Claude. BYOK, async, MITRE ATT&CK.
No known CVEs
MIT license
Maintained
Last commit 53d ago
Works with most clients
Transport: stdio, sse, http
4 tools · ~131 tok
Grade A · 0.1% of 200K ctx
MCPpedia last refreshed this data
Malware Sandbox MCP is an MCP server that detonate files & URLs in cloud malware sandboxes (Hybrid Analysis, tria.ge, ANY.RUN) and enrich IOCs across MalwareBazaar, ThreatFox, URLhaus, Feodo, URLScan & VirusTotal — straight from Claude. BYOK, async, MITRE ATT&CK. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 68/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients - only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"malware-sandbox": {
"env": {
"HA_API_KEY": "",
"VT_API_KEY": "",
"TRIAGE_API_KEY": "",
"ABUSECH_API_KEY": "",
"URLSCAN_API_KEY": ""
},
"args": [
"run",
"--directory",
"D:\\Malware-Sandbox-mcp",
"python",
"server.py"
],
"command": "uv",
"timeout": 600000
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/malware-sandbox-mcp)
Read me
What Malware Sandbox MCP does
Detonate suspicious files and URLs in cloud malware sandboxes — and pull back normalized verdicts, IOCs and MITRE ATT&CK techniques — directly from Claude.
Test This Server
This server supports HTTP transport. Be the first to test it - help the community know if it works.
Scored, not listed
Why this score
Five weighted categories - click any category to see the underlying evidence.
Score breakdown
68/100across 5 weighted dimensions
0255075100
15
8
20
15
10
−32
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.devNo known CVEs.
No package registry to scan.
Inventory
Tools (4)
Click any tool to inspect its schema.
~131 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Malware Sandbox MCP safe to use?
- Malware Sandbox MCP has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
- How do I install Malware Sandbox MCP?
- Malware Sandbox MCP supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can Malware Sandbox MCP do?
- Malware Sandbox MCP provides 4 tools: Tools, Installation, Development, License. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with Malware Sandbox MCP?
- Malware Sandbox MCP is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is Malware Sandbox MCP actively maintained?
- Malware Sandbox MCP is recently maintained - last commit was 53 days ago. It has 30 GitHub stars.
Related
Similar servers
Others in security
I
io.github.vmoranv/jshookmcp93MCP server for JavaScript analysis, security auditing, browser automation and hooks
2.0k 2
Ida Pro Mcp92AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
12.4k 3
I
io.github.KryptosAI/mcp-observatory92MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.
140 4
Jadx Ai Mcp91Plugin for JADX to integrate MCP server
2.8k 7
MCP Security Weekly
Get CVE alerts and security updates for Malware Sandbox MCP and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.