search_malware

Active

declared in 0.1.0

IOCs tagged to a malware family (e.g., "Cobalt Strike", "Emotet", "QakBot").

Parameters schema

{
  "type": "object",
  "examples": [
    {
      "malware": "Cobalt Strike"
    },
    {
      "limit": 500,
      "malware": "Emotet"
    }
  ],
  "required": [
    "malware"
  ],
  "properties": {
    "limit": {
      "type": "number",
      "description": "Max records (default 1000)"
    },
    "malware": {
      "type": "string",
      "description": "Malware family name or MISP alias"
    }
  }
}

What this tool wraps· 0 endpoints

min confidence0.70 0.50

No endpoints wrapped at confidence ≥ 0.50.

Parent server

mcp-threatfox

https://github.com/pipeworx-io/mcp-threatfox

2/7 registries

View full server →