Metadata-Version: 2.4
Name: malwaretracker-mcp
Version: 2.3.0
Summary: Official MalwareTracker & QuickSand MCP Server: scan PDFs, Office documents, emails, and RAG inputs in <100ms for malware exploits, CVEs, and hidden AI prompt-injection payloads.
Author-email: Tyler McLellan <ty@tylabs.com>
License: MIT
Project-URL: Homepage, https://malwaretracker.com
Project-URL: Documentation, https://malwaretracker.com/api.html#mcp
Project-URL: API Portal, https://api.malwaretracker.com/portal
Project-URL: Repository, https://github.com/tylabs/malwaretracker-mcp
Project-URL: Issues, https://github.com/tylabs/malwaretracker-mcp/issues
Keywords: mcp,model-context-protocol,malware-analysis,prompt-injection,ai-security,rag-firewall,quicksand,yara,soar,pdf-security
Classifier: Development Status :: 5 - Production/Stable
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Information Technology
Classifier: License :: OSI Approved :: MIT License
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.9
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Topic :: Security
Requires-Python: >=3.9
Description-Content-Type: text/markdown
License-File: LICENSE
Dynamic: license-file

<!-- mcp-name: com.malwaretracker/mcp -->

# MalwareTracker & QuickSand MCP Server (`malwaretracker-mcp`)

Official [Model Context Protocol (MCP)](https://modelcontextprotocol.io) server for **[MalwareTracker.com](https://malwaretracker.com)** and **QuickSand**.

Inspect untrusted PDFs, Microsoft Office documents (`DOC`, `DOCX`, `XLS`, `XLSX`, `PPT`, `PPTX`, `RTF`, `OneNote`), emails (`EML`, `MSG`), and RAG ingestion inputs in **<100ms** for:
- **Weaponized Document Exploits & Macros** — 239+ YARA signatures covering 67+ Office/PDF CVEs, OLE2/OOXML stream unpacking, VBA stomping, XLM macros, and encrypted `VelvetSweatshop` payloads.
- **Hidden AI / RAG Prompt Injection** — Invisible PDF rendering (`3 Tr`), zero-point font overrides, `<w:vanish/>` hidden OOXML instructions, spoofed `<tool_call>` tags, and Markdown data-exfiltration beacons.
- **Zero-Retention Compliance** — In-memory scanning (`?store=false`) for **SOC 2, HIPAA, and ISO 27001** workflows.

Get a **free API key (100 scans/month)** at **[https://api.malwaretracker.com/portal](https://api.malwaretracker.com/portal)**.

---

## Quickstart

### Option A: Local `stdio` via `uvx` (Recommended for scanning local files)

Add to `claude_desktop_config.json`, `.cursor/mcp.json`, or Windsurf / VS Code MCP settings:

```json
{
  "mcpServers": {
    "malwaretracker": {
      "command": "uvx",
      "args": ["malwaretracker-mcp"],
      "env": {
        "MALWARETRACKER_API_KEY": "mt_live_YOUR_API_KEY"
      }
    }
  }
}
```

Or install with `pip`:

```bash
pip install malwaretracker-mcp
```

Or add directly in **Claude Code**:

```bash
claude mcp add malwaretracker -e MALWARETRACKER_API_KEY=mt_live_YOUR_API_KEY -- uvx malwaretracker-mcp
```

### Option B: Hosted Remote Streamable HTTP (Zero local install)

Connect any Streamable HTTP MCP client directly to `https://api.malwaretracker.com/mcp`:

```json
{
  "mcpServers": {
    "malwaretracker-remote": {
      "type": "streamable-http",
      "url": "https://api.malwaretracker.com/mcp",
      "headers": {
        "Authorization": "Bearer mt_live_YOUR_API_KEY"
      }
    }
  }
}
```

---

## Available MCP Tools

| Tool | Description | Quota Cost |
| :--- | :--- | :--- |
| `quicksand_scan_document` | Scan a local `file_path`, `content_base64`, or `text_content` in <100ms for document malware, CVEs, and AI prompt injection (`store=false` zero-retention). | 1 scan |
| `quicksand_triage_document` | Fast Tier-0 SOAR phishing triage returning `allow`, `detonate_in_sandbox`, or `quarantine_and_detonate` plus CVE/MITRE/AI-safety verdicts. | 1 scan |
| `malwaretracker_lookup_hash` | Look up cached threat intelligence & stream analysis reports by `MD5`, `SHA1`, `SHA256`, or `SHA512`. | Free |
| `malwaretracker_list_yara_catalog` | Search MalwareTracker's YARA signature catalog, CVEs, MITRE ATT&CK IDs, and AI prompt-injection rules. | Free (no key needed) |
| `malwaretracker_get_quota` | Check active MalwareTracker plan, monthly usage, and remaining scan quota. | Free |

### Built-in MCP Prompt
- `audit_untrusted_document(file_path)` — Enforces a pre-ingestion security audit before an AI agent reads or summarizes an untrusted document.

---

## LangChain / LlamaIndex Python Guardrail

`malwaretracker-mcp` also bundles `SafeQuickSandDocumentGuard` for Python RAG pipelines:

```python
from malwaretracker_mcp import SafeQuickSandDocumentGuard

guard = SafeQuickSandDocumentGuard(api_key="mt_live_YOUR_API_KEY")
verdict = guard.verify_file("candidate_resume.pdf")
# Raises PermissionError in <100ms if an exploit or hidden prompt injection is detected!
```

---

## Links
- **Website & Interactive Scanner:** [https://malwaretracker.com](https://malwaretracker.com)
- **Developer Portal & Free API Key:** [https://api.malwaretracker.com/portal](https://api.malwaretracker.com/portal)
- **API Reference:** [https://malwaretracker.com/api.html](https://malwaretracker.com/api.html)
- **License:** MIT
