An AI-driven MCP server that autonomously interfaces with Malware Bazaar, delivering real-time threat intel and sample metadata for authorized cybersecurity research workflows.

Arkana - Your entire malware analysis lab, behind one AI prompt. 250+ MCP tools for binary analysis with Claude Code or other MCP

Virtual Assistant that enables AI-Powered Malware Research and Reverse Engineering activities, bringing Threat Intelligence Insights.

CLI + MCP server for Flagrix — scan GitHub repos for malware before you clone

Scan GitHub repos and profiles for malware before you clone — CLI and MCP server for the Flagrix scanner

The Lazaretto MCP server and npm package: a free lockfile malware check, plus full scans of npm packages, agent skills and MCP servers.

MCP server bridging Kali and FlareVM for automated Windows malware analysis. 48 tools, 5 prompts, 5 resources, composite playbooks (triage, behavioral, unpack, persistence audit).

Ultimate Kali Defensive Security & System Hardening MCP Server — 78 defensive security tools for firewall management, CIS benchmarks, intrusion detection, malware scanning, container security, zero-trust networking, and more.

Um projeto feito com o Gemini 4 Argon que permita analistas de malware agilizarem a análise estática básica/avançada com uma ferramenta multi-mcp agêntica que se deriva principalmente de ferramentas open-source, tais como o Ghidra, FLOSS, CAPA, radare2 e o DiE.

Static decompiler, deobfuscator, and unpacker for reverse engineering and malware analysis: Python decompiler (3.8-3.15), PyInstaller extractor, PyArmor unpacker, JavaScript deobfuscator (obfuscator.io, JS-Confuser, webpack), Android APK and Java decompiler, .NET deobfuscator, UPX unpacker, Lua, PHP, WASM, PowerShell. MCP server.

LitterBox MCP Server - Advanced malware analysis sandbox with OPSEC assessment capabilities

MCP server for PhishTank and Google Safe Browsing — check and verify phishing and malware URLs.

An AI driven debugging assistant specially designed for x32/x64dbg, it helps to double the efficiency of reverse engineering, vulnerability mining, and malware analysis, making it your intelligent copilot.

MCP server that checks npm, PyPI, Go, crates and more against OSV.dev for known vulnerabilities and malware. Free tier, then pay per call via x402.

A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.

CYBERDUDEBIVASH® MCP Server – Zero-Trust AI Cybersecurity Command Center (Private Development) Production-grade autonomous AI agents for SOC, pentesting, malware analysis, threat intel & DevSecOps. © 2026 CYBERDUDEBIVASH – All Rights Reserved

MCP server for automated macOS malware analysis via SSH. 43 tools, 5 prompts, 5 resources, composite playbooks (triage, behavioral, app-bundle audit, IR scan).

Universal Cybersecurity Model Context Protocol (MCP) Server & Token-Saving Agent Skills for Claude Desktop, Cursor, GPT-4o, and Antigravity. Purple Teaming, WAF Triad Audit, Malware PE Triage, USB Forensics & Caveman Token Optimizer.

Version-accurate library docs and a dependency check for AI coding agents. MCP server, pre-install hook, CLI and GitHub Action that check every package an agent pins (advisories, malware, lookalikes, versions that do not exist) before the install runs. Local, MIT.

Dependency vulnerability and malicious package scanner for AI agents and MCP: check package.json, package-lock.json, requirements.txt, go.mod, Cargo.lock for known CVEs (GHSA, OSV) and malware before npm install. Free MCP server; full advisories via x402

Security layer for AI agents: real-time interception of pip/npm/cargo/gem/go installs via Hermes & OpenClaw plugins, Claude Code/Codex hooks, MCP, shell guard, PATH shim, execve, and index proxy. Checks CVEs (OSV/NVD/GitHub), typosquats, malware, licenses, provenance, trust, lockfile hashes. Offline mirror, hash-chained audit, SBOM/SARIF.

Automate x64dbg reverse engineering workflows via MCP, enabling AI-driven debugging, analysis, and plugin control.

your ai debugger, vibe hacking tool

x64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant and control x64dbg programmatically: set breakpoints, step through code, read memory, dump registers, and more. Built with Zig — zero dependencies, single-binary output, cros

MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.

A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.

Python toolkit providing security checks for domains, URLs, IPs, and more.

MCP server for analyzing PE, ELF, and Mach-O binaries using LIEF

a simple rizin-mcp tool that support rizin analysis and capa-rule

MCP server for VirusTotal API integration

Run simple YARA-style string/regex rules over a directory

MCP server for MISP threat intelligence platform - IOC lookups, event management, correlation discovery, and intelligence enrichment

[ALPHA] Binary + RE workstation (strings/entropy/DiE/CAPA/DKI). Implements the Storytold craft-app harness (CLI + MCP) - see storytold/artcraft.

AIclude Security Vulnerability Scanner - MCP Server for scanning MCP servers and Skills for security vulnerabilities

MCP server for URLhaus (abuse.ch) — look up malicious URLs, payloads, and host/signature threat intelligence.

VirusTotal MCP Server – security analysis for URLs, files, IPs and domains

Windows Forensics MCP Server - EVTX parsing, Registry analysis, PE analysis, API Monitor knowledge base, and remote artifact collection for DFIR

A Pure-Java MCP Server for JaDX Android Reverse Engineering Tool

Reverse engineering, rebuilt for AI agents. A pure Rust engine your agent drives over MCP.

Secure local REST, CLI, MCP, and agent bridge for IDA Pro 9.x

Verifies that deployed on-chain bytecode matches a given source/Foundry build, detecting unverified or tampered proxies and implementations.

Risk signals for a repository or an npm/PyPI package, with evidence. Never runs the target's code.

JADX-quality Android decompiler for AI agents: per-class extraction via patched rust_ASC + long-lived JADX, with MCP server

Evidence-first npm package and project dependency checks for developers, coding agents, and MCP clients before code executes.

🛡️ MCP AI Powered Threat Intelligence - Revolutionizing Cybersecurity | Built by Arjun Trivedi (4R9UN)

🎯 Advanced GPT-5 Powered Ghidra Reverse Engineering MCP Server | 7 AI-Enhanced Analysis Tools | Professional Binary Analysis | TechSquad Inc. Proprietary Software

🏢 Enterprise Windows Service for GPT-5 Powered Ghidra Reverse Engineering | Professional MSI Installer | PowerShell Management | Windows Security Integration

Analyze binaries with a sandboxed MCP tool that unifies reverse engineering utilities and adds filesystem isolation, timeouts, and input checks

MCP tool + CLI: identify a file and decide whether opening it is dangerous. Catches pickle/torch RCE payloads, Keras Lambda bytecode, zip-slip entries.

专为 AI Agent 打造的跨平台二进制静态逆向分析与数字取证 MCP Server（原生支持 PE / ELF / Mach-O，内置 LIEF + Capstone + pefile 内核并按需挂载 radare2 / objdump / floss）

Game/desktop binary integrity scanner that fingerprints executables, detects common packers/obfuscators, and diffs against a known-good baseline to catch tampering.

专为 AI Agent 打造的跨平台二进制静态逆向分析与数字取证 MCP Server（原生支持 PE / ELF / Mach-O，内置 LIEF + Capstone + pefile 内核并按需挂载 radare2 / objdump / floss）

Give your AI agent full native Windows control via System Informer MCP — inspect processes, services, network, memory & more in C.

MCP server for accessing URLhaus malicious URL database from abuse.ch - provides threat intelligence for cybersecurity research

Install gate for AI coding agents: blocks malicious, hallucinated and typosquatted packages (npm, PyPI, crates.io, Go) before Claude Code installs them. Hook + MCP server + CLI.

Autonomous headless Ghidra 12 reverse engineering for Pi, omp, and MCP clients: decompile, xrefs, call graphs, strings, memory, and patches without the GUI.

Local-first, deterministic MCP server for IDA Pro/Home: 109 strict-schema reverse-engineering operations, evidence-backed findings, and policy-gated IDB edits.

Analyze software: memory scanner, debugger and static analysis of executables, .NET and Electron apps, from the desktop, the command line, or an AI agent through MCP.

MCP server and CLI for reverse engineering and security analysis of .NET and native binaries (PE, ELF, Mach-O): decompile, search, compare builds, patch. IDA and Ghidra optional.

Drive x64dbg with your AI. MCP server: 23 mega-tools / 153 endpoints for breakpoints, memory, disasm, tracing, anti-debug & PE dumping. Claude/Cursor/Windsurf/Cline. All local.