com.malwagon/malwagon

down checked 2026-11-11T06:37:33.761Z

Unclaimed · Unverified

Publisher-provided title

Malwagon

Publisher-provided description

Submit files and URLs to a malware sandbox, poll scans, fetch reports, hashes and IOCs.

Summary by lookupd

Submit files or URLs for malware sandbox analysis, poll scan status, and retrieve verdicts, hashes, and indicators of compromise.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http malwagon https://malwagon.com/mcp

Codex, remote (streamable-http)

codex mcp add malwagon --url https://malwagon.com/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "malwagon": {
      "url": "https://malwagon.com/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Publisher-provided text

lookup_hash Find analyses of a known SHA-256 digest. Returns the caller's own scans of those bytes plus any publicly shared scan of them. Sends nothing anywhere: this searc
get_report The derived analysis report for one scan: verdict, capabilities, behaviour summary, observed operations and defanged indicators. Derived data only - it never co
search_indicator Find scans where an indicator was observed: an IP, a domain, a URL, a mutex, a registry key, a hash or a JA3/JA4 fingerprint. The indicator is matched exactly;
poll_scan The current status of one scan, for polling after submit_scan. Cheap enough to call in a loop. 'terminal' means the scan will not change again; 'report_availabl
submit_scan Queue a new analysis of a target that can be named as text: a SHA-256 to look up, a URL to visit, a command to run, or a package to install. Uploading a file or

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/com.malwagon/malwagon.svg)](https://lookupd.com/servers/com.malwagon/malwagon)