Malwagon

Hosted malware analysis sandbox. Submit a hash, URL, command or package and it detonates on instrumented Windows and Linux virtual machines, then returns the derived report: verdict and score, process, registry, file and network behaviour, ATT&CK technique mappings and defanged indicators. Also searches past scans by indicator (IP, domain, URL, mutex, registry key, hash, JA3/JA4). Sample bytes, downloads and artifacts are never served over MCP, only derived data. Remote streamable HTTP at `https://malwagon.com/mcp`; `initialize` and `tools/list` answer without a credential, tool calls take a bearer token from a free account. Registry: `com.malwagon/malwagon`.

Project · Homepage

Browse this MCP server in the TensorBlock MCP Index.