malwarebazaar 5 tools

MCP server exposing 5 tools for malwarebazaar.

Endpoint

This URL is a JSON-RPC 2.0 endpoint over HTTP. Issue POST requests with a JSON-RPC body. Browsers and search crawlers land here on GET.

POST https://gateway.pipeworx.io/malwarebazaar/mcp
Content-Type: application/json

{"jsonrpc":"2.0","id":1,"method":"tools/list"}

Tools

• get_sample_info — Metadata for a malware sample by hash (md5/sha1/sha256). Returns file type, signature, file_name, first/last seen, tags, family, intel sources.
• search_tag — Find samples tagged with a string (e.g., "emotet", "macro", "exe").
• search_family — Find samples for a malware family name.
• search_signature — Find samples matching a YARA / threat-intel signature.
• recent_samples — Most recent samples in MalwareBazaar. Use the selector to pick a chunk size.

Full documentation

Code samples (curl / TypeScript / one-click client install), schemas, and the live playground are on the pack page:
https://pipeworx.io/packs/malwarebazaar/

About Pipeworx

Pipeworx is an open MCP gateway connecting AI agents to live data. pipeworx.io