search_by_hash
Search Threat.Zone malware analysis submissions using file hashes (MD5, SHA1, SHA256) to identify threats and retrieve analysis reports.
Instructions
Search submissions by file hash (MD5, SHA1, or SHA256).
Args: hash: File hash to search for page: Page number (default: 1) jump: Number of items per page (default: 10)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| hash | Yes | ||
| page | No | ||
| jump | No |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Implementation Reference
- src/threatzone_mcp/server.py:594-604 (handler)The handler function for the 'search_by_hash' tool, decorated with @app.tool for registration. It queries the ThreatZone API to search for submissions matching the provided file hash (MD5, SHA1, SHA256), with pagination support.
@app.tool async def search_by_hash(hash: str, page: int = 1, jump: int = 10) -> Dict[str, Any]: """ Search submissions by file hash (MD5, SHA1, or SHA256). Args: hash: File hash to search for page: Page number (default: 1) jump: Number of items per page (default: 10) """ return await get_client().get(f"/public-api/get/{hash}/{page}/{jump}")