MCP server exposing 4 tools for urlhaus.
This URL is a JSON-RPC 2.0 endpoint over HTTP. Issue POST requests with a JSON-RPC body. Browsers and search crawlers land here on GET.
POST https://gateway.pipeworx.io/urlhaus/mcp
Content-Type: application/json
{"jsonrpc":"2.0","id":1,"method":"tools/list"}lookup_url — Look up a URL in the URLhaus malware database to check if it is known to host or distribute malware. Returns threat category, status, blacklist status, and tags.lookup_host — Look up a hostname or IP address in the URLhaus database to find associated malware URLs. Returns all known malicious URLs hosted on that host.get_recent — Get a list of recently submitted malware URLs from URLhaus. Useful for monitoring the latest threats.lookup_payload — Look up a malware payload file by its MD5 or SHA256 hash in the URLhaus database. Returns file type, size, first/last seen dates, and associated delivery URLs.Code samples (curl / TypeScript / one-click client install), schemas, and the live playground are on the pack page:
https://pipeworx.io/packs/urlhaus/
Pipeworx is an open MCP gateway connecting AI agents to live data. pipeworx.io