search_by_hash
Search malware analysis submissions using file hashes (MD5, SHA1, SHA256) to retrieve threat intelligence and analysis results from Threat.Zone's database.
Instructions
Search submissions by file hash (MD5, SHA1, or SHA256).
Args: hash: File hash to search for page: Page number (default: 1) jump: Number of items per page (default: 10)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| hash | Yes | ||
| jump | No | ||
| page | No |
Implementation Reference
- src/threatzone_mcp/server.py:594-605 (handler)The handler function for the 'search_by_hash' tool. Registered via @app.tool decorator. Calls the ThreatZone API endpoint to search submissions by file hash (MD5, SHA1, SHA256) with pagination.@app.tool async def search_by_hash(hash: str, page: int = 1, jump: int = 10) -> Dict[str, Any]: """ Search submissions by file hash (MD5, SHA1, or SHA256). Args: hash: File hash to search for page: Page number (default: 1) jump: Number of items per page (default: 10) """ return await get_client().get(f"/public-api/get/{hash}/{page}/{jump}")