Log inSubmit server
M

Malwagon

Submit files and URLs to a malware sandbox, monitor scans, and retrieve reports, hashes, and IOCs.

InstallWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Malwagon

Pick your client, then add it in one click or paste the config.

No confirmed install command yet

We only publish a config when the install details come from the project itself — its README, its docs, or a verified owner. We haven’t found those for Malwagon, and we’d rather show nothing than a guess you’d paste into your client.

Open the project’s setup instructions

Overview

The Malwagon MCP server submits files and URLs to a malware sandbox and exposes scan results for agent workflows. It supports polling scan status, then fetching reports, hashes, and indicators of compromise (IOCs). Reach for it when an agent needs to submit suspicious artifacts and inspect sandbox output through MCP.

Use cases

  • Submit suspicious files for sandbox analysis
  • Submit URLs for malware scanning
  • Poll scans until results are available
  • Retrieve reports, hashes, and IOCs for agent workflows

Key features

  • File submission
  • URL submission
  • Scan polling
  • Report retrieval
  • Hash retrieval
  • IOC retrieval

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 1d ago

Recent health check succeeded.

6/6 checks healthy over the last 46d

How Malwagon works

What Malwagon MCP server does

The Malwagon MCP server connects MCP-based agent workflows with a malware sandbox. Its documented purpose is to accept files and URLs for analysis, monitor the resulting scans, and return selected analysis data. The available description identifies four result categories: reports, hashes, and indicators of compromise (IOCs), alongside scan status.

This makes the server relevant to workflows that need to move an artifact into a sandbox and inspect the outcome programmatically. A typical workflow would begin with a file or URL submission, continue by checking whether the scan has completed, and finish by retrieving the available findings.

How it works

The documented interaction is organized around a submission-and-polling flow. An agent submits either a file or a URL, polls the associated scan, and fetches results after or during processing. The returned information can include a report, hashes associated with the analyzed artifact, and extracted IOCs.

Those details should be confirmed before building a production workflow around the Malwagon MCP server.

Tools and capabilities

The listed capabilities cover:

  • Submitting files for sandbox analysis.
  • Submitting URLs for sandbox analysis.
  • Polling submitted scans.
  • Fetching malware analysis reports.
  • Retrieving hashes.
  • Retrieving indicators of compromise (IOCs).

The material does not provide formal tool names, input fields, output examples, or limits. Treat the capability list as functional scope rather than a complete API reference.

Limitations and notes

As a result, the Malwagon MCP server’s installation procedure, environment variables, credentials, transport, supported MCP clients, file-size limits, URL restrictions, and retention behavior cannot be confirmed here.

The description also does not state whether reports, hashes, or IOCs are returned immediately or only after a scan reaches a particular state. Client implementations should therefore handle the documented polling step and consult the project’s own documentation for exact request and response requirements.

The server is specifically described around malware-sandbox submissions and scan-result retrieval.

Read the full README

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Malwagon

Malwagon is an MCP server that connects an agent to a malware sandbox for submitting files and URLs, checking scan status, and retrieving reports, hashes, and indicators of compromise (IOCs). It is intended for workflows that need sandbox results exposed through MCP tools rather than manual submission and report retrieval.

The listing identifies Malwagon’s sandbox submission and retrieval capabilities but does not specify a package, command, transport, configuration file, or authentication setup.

You can retrieve malware analysis reports, hashes, and indicators of compromise (IOCs). The description also identifies scan polling, but it does not provide the exact response fields or tool names.

No supported MCP clients or client-specific configuration are named, so compatibility should be verified against the project’s current documentation.

Related MCP servers

All in Code Execution All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewMalwagon AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/malwagon?style=directory)](https://allmcps.com/mcp/malwagon)
HTML Embed
<a href="https://allmcps.com/mcp/malwagon"><img src="https://allmcps.com/api/badge/malwagon?style=directory" alt="Malwagon on AllMCPs" /></a>