MalwareTracker Document Malware & AI Safety Scanner
Server Details
Scan PDFs, Office docs, and RAG files for malware exploits, macros, CVEs, and AI prompt injection.
- Status
- Healthy
- Uptime
- 100.0% over the last 24 hours
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- Repository
- tylabs/malwaretracker-mcp
- GitHub Stars
- 0
- Server Listing
- malwaretracker-mcp
- ChatGPT
- –
- Claude
- –
TDQS
Score is being calculated.
Available Tools
5 toolsmalwaretracker_get_quotaRead-onlyIdempotentInspect
Check current MalwareTracker API plan, monthly scan usage, and remaining quota.
Inputs: no named parameters.
malwaretracker_list_yara_catalogRead-onlyIdempotentInspect
List or filter MalwareTracker's QuickSand YARA signature catalog, covered CVEs, MITRE ATT&CK techniques, and AI/RAG prompt-injection detection rules. Requires no API key.
Inputs: cve, search, category.
malwaretracker_lookup_hashRead-onlyIdempotentInspect
Look up a previously analyzed document malware & stream report by MD5, SHA1, SHA256, or SHA512 hash. Does not consume monthly scan quota.
Inputs: hash (required).
quicksand_scan_documentRead-onlyIdempotentInspect
Scan a PDF, Office document (DOC/DOCX/XLS/XLSX/PPT/PPTX/RTF/OneNote), email, archive, or extracted text in <100ms for embedded malware exploits, macros, CVEs, and hidden AI/RAG prompt-injection payloads (3 Tr invisible PDF text, zero-point fonts, <w:vanish/> OOXML tags, spoofed <tool_call> tags, and markdown exfiltration beacons) with zero file retention.
Inputs: filename, password, text_content, content_base64.
quicksand_triage_documentRead-onlyIdempotentInspect
Fast Tier-0 SOAR phishing & attachment triage. Evaluates a document in milliseconds and returns verdict ('clean' | 'suspicious' | 'malicious'), recommended_action ('allow' | 'detonate_in_sandbox' | 'quarantine_and_detonate'), escalate_to_sandbox, matched CVEs, MITRE ATT&CK techniques, and AI prompt-injection findings.
Inputs: filename, text_content, content_base64.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
Scan text, documents, websites, and MCP metadata for prompt injection and sensitive-data risks.
Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections an.
Check a document for hidden text before your agent reads it. PDF, Office, RTF, HTML.
Prompt injection detection API for AI agents. Scan untrusted text before passing it to an LLM.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceEnables users to scan untrusted text, files, and directory trees for prompt-injection patterns and receive severity-ranked, explainable verdicts before content reaches an agent. It runs locally and returns clean, review, or blocked verdicts for safer agent input.1MIT
- AlicenseAqualityBmaintenanceSovereign AI Security Suite & Threat Scanner. Real-time detection for phishing URLs, zero-day web threats, quishing QR codes, prompt injection defense, carrier disarming (AI-CDR), and autonomous agent safety guardrails.3MIT

Perlectaofficial
AlicenseNot gradedqualityNot gradedmaintenanceEnables agents to analyze documents for hidden text and indirect prompt-injection indicators before reading them, returning report metadata without exposing the hidden content.Apache 2.0- AlicenseAqualityCmaintenanceEnables agents like Claude Code and Codex to statically scan .zip, .exe, .dll files and GitHub repositories for malware without executing them, explaining likely false positives and letting users dig into reports through natural language.5MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.