Skip to main content
Glama
SaeidSec

Malware Analysis MCP Server

by SaeidSec
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

Related Servers

Alternatives to Malware Analysis MCP Server

No user-submitted related servers found.

    Related Servers

    • Google Threat Intelligence MCP

      googleSandy
      F
      license
      B
      quality
      C
      maintenance
      Enables AI assistants to access Google's Threat Intelligence suite for file analysis, indicator of compromise searches, and reputation checking. It supports both local and cloud-based deployments for investigating campaigns, threat actors, and malware families.
      36
      4
      -

    • cybersec-mcp

      fa1829
      A
      license
      A
      quality
      B
      maintenance
      Enables AI assistants to perform cybersecurity tasks including hash analysis, CVE lookup, HTTP header auditing, WHOIS/OSINT, payload decoding, password strength evaluation, and threat report generation.
      7
      MIT
    • REMnux MCP Server by REMnux

      REMnux MCP Serverofficial

      REMnux
      A
      license
      A
      quality
      B
      maintenance
      Enables AI assistants to execute malware analysis tools on a REMnux system via Docker, SSH, or local connections. It provides automated file-type analysis, structured tool discovery, and security guardrails for streamlined malware investigation.
      12
      1,346 npm
      123
      GPL 3.0

    • Self-Assembling Forensic MCP

      Ghosthunter5599
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables AI assistants to perform digital forensics analysis including memory analysis, file metadata inspection, and threat-intelligence lookups.
      5 npm
      ISC

    • Nullcone MCP Server

      maco144
      F
      license
      Not graded
      quality
      D
      maintenance
      Provides real-time threat intelligence for AI agents, enabling checks on IPs, domains, URLs, hashes, CVEs, prompt-injection payloads, and malicious AI-skill/MCP-tool definitions against a free database of 890K+ IOCs.
      -
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    D1.5/5.0

    Scored across 29 tools

    Disambiguation2/5

    Several tools have vague or overlapping purposes, especially get_recent, get_info, get_taginfo, virustotal_lookup, and vt_lookup. The lack of descriptions makes it hard to distinguish similar-sounding intel lookup and generic retrieval tools from one another.

    Naming Consistency3/5

    Most names use snake_case, which is readable, but the set mixes verb_noun patterns with noun-only names like entropy and hexdump_text. Abbreviation inconsistency between virustotal_lookup and vt_lookup weakens predictability.

    Tool Count2/5

    At 29 tools, the server is heavy for a malware analysis utility surface and includes apparent duplication. The encoding, compression, hashing, and crypto operations could likely be grouped or reduced.

    Completeness4/5

    The tool set broadly covers threat intel lookup, local file checks, encoding, hashing, entropy, IOC handling, YARA templating, and alerting. It lacks obvious dynamic analysis or sandbox detonation capabilities, but the core analysis utility surface is fairly comprehensive.

    Maintenance

    ActivityInactive
    ResponsivenessNo issues

    Resources