get_submission_status_summary
Retrieve detailed analysis results for malware submissions, including interpreted status and threat level assessment, to monitor security threats.
Instructions
Get submission details with interpreted status and threat level.
Args: uuid: Submission UUID
Returns: Submission details with human-readable status and threat level
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| uuid | Yes |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Implementation Reference
- src/threatzone_mcp/server.py:178-198 (handler)The handler function for the 'get_submission_status_summary' tool. It retrieves submission details from the ThreatZone API and enriches the response with human-readable interpretations of the status and threat level using helper functions interpret_status and interpret_threat_level.
@app.tool async def get_submission_status_summary(uuid: str) -> Dict[str, Any]: """ Get submission details with interpreted status and threat level. Args: uuid: Submission UUID Returns: Submission details with human-readable status and threat level """ submission = await get_client().get(f"/public-api/get/submission/{uuid}") # Add interpreted values if available if 'status' in submission: submission['status_description'] = await interpret_status(submission['status']) if 'level' in submission: submission['threat_level_description'] = await interpret_threat_level(submission['level']) return submission - src/threatzone_mcp/server.py:138-155 (helper)Helper tool that converts numeric status codes to human-readable descriptions. Called by get_submission_status_summary to enrich the API response.
async def interpret_status(status_value: int) -> str: """ Interpret a numeric status value from submission results. Args: status_value: Numeric status value (1-5) Returns: Human-readable status description """ status_map = { 1: "File received", 2: "Submission is failed", 3: "Submission is running", 4: "Submission VM is ready", 5: "Submission is finished" } return status_map.get(status_value, f"Unknown status: {status_value}") - src/threatzone_mcp/server.py:158-175 (helper)Helper tool that converts numeric threat levels to human-readable descriptions. Called by get_submission_status_summary to enrich the API response.
@app.tool async def interpret_threat_level(level_value: int) -> str: """ Interpret a numeric threat level value from analysis results. Args: level_value: Numeric threat level (0-3) Returns: Human-readable threat level description """ level_map = { 0: "Unknown", 1: "Informative", 2: "Suspicious", 3: "Malicious" } return level_map.get(level_value, f"Unknown level: {level_value}") - src/threatzone_mcp/server.py:178-178 (registration)The @app.tool decorator registers the get_submission_status_summary function as an MCP tool in the FastMCP server.
@app.tool