Skip to main content
Glama

MalwareTracker Document Malware & AI Safety Scanner

Server Details

Scan PDFs, Office docs, and RAG files for malware exploits, macros, CVEs, and AI prompt injection.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Uptime
100.0% over the last 24 hours
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL
Repository
tylabs/malwaretracker-mcp
GitHub Stars
0
Server Listing
malwaretracker-mcp
ChatGPT
–
Claude
–

TDQS

Score is being calculated.

Available Tools

5 tools
malwaretracker_get_quota
Read-onlyIdempotent
Inspect

Check current MalwareTracker API plan, monthly scan usage, and remaining quota.

Inputs: no named parameters.

malwaretracker_list_yara_catalog
Read-onlyIdempotent
Inspect

List or filter MalwareTracker's QuickSand YARA signature catalog, covered CVEs, MITRE ATT&CK techniques, and AI/RAG prompt-injection detection rules. Requires no API key.

Inputs: cve, search, category.

malwaretracker_lookup_hash
Read-onlyIdempotent
Inspect

Look up a previously analyzed document malware & stream report by MD5, SHA1, SHA256, or SHA512 hash. Does not consume monthly scan quota.

Inputs: hash (required).

quicksand_scan_document
Read-onlyIdempotent
Inspect

Scan a PDF, Office document (DOC/DOCX/XLS/XLSX/PPT/PPTX/RTF/OneNote), email, archive, or extracted text in <100ms for embedded malware exploits, macros, CVEs, and hidden AI/RAG prompt-injection payloads (3 Tr invisible PDF text, zero-point fonts, <w:vanish/> OOXML tags, spoofed <tool_call> tags, and markdown exfiltration beacons) with zero file retention.

Inputs: filename, password, text_content, content_base64.

quicksand_triage_document
Read-onlyIdempotent
Inspect

Fast Tier-0 SOAR phishing & attachment triage. Evaluates a document in milliseconds and returns verdict ('clean' | 'suspicious' | 'malicious'), recommended_action ('allow' | 'detonate_in_sandbox' | 'quarantine_and_detonate'), escalate_to_sandbox, matched CVEs, MITRE ATT&CK techniques, and AI prompt-injection findings.

Inputs: filename, text_content, content_base64.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      Not graded
      quality
      B
      maintenance
      Enables users to scan untrusted text, files, and directory trees for prompt-injection patterns and receive severity-ranked, explainable verdicts before content reaches an agent. It runs locally and returns clean, review, or blocked verdicts for safer agent input.
      1
      MIT
    • A
      license
      A
      quality
      B
      maintenance
      Sovereign AI Security Suite & Threat Scanner. Real-time detection for phishing URLs, zero-day web threats, quishing QR codes, prompt injection defense, carrier disarming (AI-CDR), and autonomous agent safety guardrails.
      3
      MIT
    • A
      license
      Not graded
      quality
      Not graded
      maintenance
      Enables agents to analyze documents for hidden text and indirect prompt-injection indicators before reading them, returning report metadata without exposing the hidden content.
      Apache 2.0
    • A
      license
      A
      quality
      C
      maintenance
      Enables agents like Claude Code and Codex to statically scan .zip, .exe, .dll files and GitHub repositories for malware without executing them, explaining likely false positives and letting users dig into reports through natural language.
      5
      MIT
    Try in Browser

    Glama MCP Gateway

    Add one secure layer between your agents and this server.