mytechnotalent/MalwareBazaar_MCP

An AI-driven MCP server that autonomously interfaces with Malware Bazaar, delivering real-time threat intel and sample metadata for authorized cybersecurity research workflows.
# MCP Tools
#### getrecent: Get up to 10 most recent samples from MalwareBazaar.
#### getinfo: Get detailed metadata about a specific malware sample.
#### getfile: Download a malware sample from MalwareBazaar.
#### gettaginfo: Get malware samples associated with a specific tag.
# Step 1: Create a MalwareBazaar APIKEY
https://auth.abuse.ch/user/me
# Step 2: Create .env
bash
MALWAREBAZAARAPIKEY=
# Step 3a: Create Virtual Env & Install Requirements - MAC/Linux
bash
curl -LsSf https://astral.sh/uv/install.sh | sh
cd MalwareBazaarMCP
uv init .
uv venv
source .venv/bin/activate
uv pip install -r requirements.txt
# Step 3b: Create Virtual Env & Install Requirements - Windows
bash
powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"
cd MalwareBazaarMCP
uv init .
uv venv
.venv\Scripts\activate
uv pip install -r requirements.txt
# Step 4a: Add Config to the MCP Client - MAC/Linux
bash
"mcpServers": {
"malwarebazaar": {
"description": "Malware Bazaar MCP Server",
"command": "/Users/XXX/.local/bin/uv",
"args": [
"--directory",
"/Users/XXX/Documents/MalwareBazaarMCP",
"run",
"malwarebazaarmcp.py"
# Step 4b: Add Config to the MCP Client - Windows
bash
"mcpServers": {
"malwarebazaar": {
"description": "Malware Bazaar MCP Server",
"command": "uv",
"args": [
"--directory",
"C:\Users\XXX\Document\MalwareBazaarMCP",
"run",
"malwarebazaarmcp.py"
# Step 5: Run MCP Server
bash
uv run malwarebazaarmcp.py
# Step 6: Run MCP Client & Query
Help me understnad the latest hash from Malware Bazaar.
# Step 7: Run Tests
python -m unittest discover -s tests
uv pip install coverage==7.8.0
coverage run --branch -m unittest discover -s tests
coverage report -m
coverage html
open htmlcov/index.html # MAC