A
licenseNot graded
qualityC
maintenanceEnables users to query Have I Been Pwned data classes and check breaches via Pipeworx MCP gateway, allowing natural language interaction.
10
MIT
mcp-urlhaus
by pipeworx-io
Provides access to the URLhaus malware URL database, enabling querying and retrieval of malware URLs from abuse.ch.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@mcp-urlhauscheck if example.com is a known malware URL"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
mcp-urlhaus
URLhaus MCP — wraps abuse.ch URLhaus malware URL database (free, no auth)
Part of Pipeworx — an MCP gateway connecting AI agents to 1394+ live data sources.
Tools
Tool | Description |
| Look up a URL in the URLhaus malware database to check if it is known to host or distribute malware. Returns threat category, status, blacklist status, and tags. |
| Look up a hostname or IP address in the URLhaus database to find associated malware URLs. Returns all known malicious URLs hosted on that host. |
| Get a list of recently submitted malware URLs from URLhaus. Useful for monitoring the latest threats. |
| Look up a malware payload file by its MD5 or SHA256 hash in the URLhaus database. Returns file type, size, first/last seen dates, and associated delivery URLs. |
Related MCP server: scanmalware-mcp
Quick Start
Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):
{
"mcpServers": {
"urlhaus": {
"url": "https://gateway.pipeworx.io/urlhaus/mcp"
}
}
}Or connect to the full Pipeworx gateway for access to all 1394+ data sources:
{
"mcpServers": {
"pipeworx": {
"url": "https://gateway.pipeworx.io/mcp"
}
}
}Using with ask_pipeworx
Instead of calling tools directly, you can ask questions in plain English:
ask_pipeworx({ question: "your question about Urlhaus data" })The gateway picks the right tool and fills the arguments automatically.
More
License
MIT
This server cannot be installed
Maintenance
–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
scanmalware-mcpofficial
AlicenseNot gradedqualityCmaintenanceWraps the ScanMalware.com API to enable phishing triage, malware scanning, and certificate inspection through natural language, allowing users to submit scans, retrieve results, and analyze threats via MCP tools.Apache 2.0- FlicenseNot gradedqualityDmaintenanceMCP server that checks URLs against the URLhaus malware database to identify malicious URLs.
- AlicenseNot gradedqualityCmaintenanceEnables file, URL, domain, and IP reputation checks via VirusTotal API using the Pipeworx gateway.9MIT
Related MCP Connectors
PhishTank MCP — wraps PhishTank API (checkurl.phishtank.com)
VirusTotal MCP — file / URL / domain / IP reputation (BYO key)
AbuseIPDB MCP — wraps AbuseIPDB v2 API (api.abuseipdb.com/api/v2)
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/pipeworx-io/mcp-urlhaus'
If you have feedback or need assistance with the MCP directory API, please join our Discord server