Skip to main content
Glama
pipeworx-io

mcp-malwarebazaar

by pipeworx-io
OverviewSchemaRelated ServersScoreDiscussions
TypeScript
Remote

mcp-malwarebazaar

MalwareBazaar MCP — abuse.ch malware sample database (free, key required)

Part of Pipeworx — an MCP gateway connecting AI agents to 673+ live data sources.

Tools

Tool

Description

search_tag

Find samples tagged with a string (e.g., "emotet", "macro", "exe").

search_family

Find samples for a malware family name.

search_signature

Find samples matching a YARA / threat-intel signature.

recent_samples

Most recent samples in MalwareBazaar. Use the selector to pick a chunk size.

Related MCP server: Malware Analysis MCP Server

Quick Start

Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):

{
  "mcpServers": {
    "malwarebazaar": {
      "url": "https://gateway.pipeworx.io/malwarebazaar/mcp"
    }
  }
}

Or connect to the full Pipeworx gateway for access to all 673+ data sources:

{
  "mcpServers": {
    "pipeworx": {
      "url": "https://gateway.pipeworx.io/mcp"
    }
  }
}

Using with ask_pipeworx

Instead of calling tools directly, you can ask questions in plain English:

ask_pipeworx({ question: "your question about Malwarebazaar data" })

The gateway picks the right tool and fills the arguments automatically.

More

License

MIT

This server cannot be installed

A
license - permissive license
-
quality - not tested
C
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • Abuse.ch Threat Intelligence

    lokallost
    A
    license
    -
    quality
    D
    maintenance
    Enables querying threat intelligence data about files, URLs, IPs, and domains from multiple abuse.ch platforms (MalwareBazaar, URLhaus, and ThreatFox) through a unified API. Provides comprehensive security reports and threat analysis data for cybersecurity investigations.
    Last updated
    3
    MIT

  • Malware Analysis MCP Server

    SecurityTalent
    F
    license
    -
    quality
    D
    maintenance
    Provides real-time threat intelligence and malware metadata by integrating with MalwareBazaar and VirusTotal APIs. Users can search for IOCs, analyze local file hashes, and access data transformation tools for defensive security research.
    Last updated

  • MalwareBazaar_MCP

    mytechnotalent
    A
    license
    -
    quality
    C
    maintenance
    An AI-driven MCP server that autonomously interfaces with Malware Bazaar, delivering real-time threat intel and sample metadata for authorized cybersecurity research workflows.
    Last updated
    30
    Apache 2.0

View all related MCP servers

Related MCP Connectors

  • Urlhaus

    URLhaus MCP — wraps abuse.ch URLhaus malware URL database (free, no auth)

  • Virustotal

    VirusTotal MCP — file / URL / domain / IP reputation (BYO key)

  • Threatfox

    ThreatFox MCP — abuse.ch indicator-of-compromise feed (free, key required)

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/pipeworx-io/mcp-malwarebazaar'

If you have feedback or need assistance with the MCP directory API, please join our Discord server