広告掲載
MCP.so
ログイン

YaraFlux MCP Server

@ThreatFlux

リポジトリ

基本情報

カテゴリ

その他

ライセンス

MIT

トランスポート

stdio

作者

ThreatFlux

YaraFlux MCP Server について

A yara based MCP Server

YaraFlux MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "YaraFlux": {
      "command": "docker",
      "args": [
        "pull",
        "threatflux/yaraflux-mcp-server:latest"
      ]
    }
  }
}

YaraFlux MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is YaraFlux MCP Server?

YaraFlux MCP Server is a Model Context Protocol (MCP) server that gives AI assistants the ability to analyze files using YARA rules. It integrates YARA-based threat scanning with LLMs, supporting comprehensive rule management, secure scanning, and result analysis through a modular architecture.

How to use YaraFlux MCP Server?

Run it with Docker (docker pull threatflux/yaraflux-mcp-server:latest and docker run with the required JWT_SECRET_KEY, ADMIN_PASSWORD, and DEBUG environment variables) or install from source (requires Python 3.13+, then make install and make run). For Claude Desktop, add a docker entry to claude_desktop_config.json with the appropriate environment variables and auto-approved tools.

Key features of YaraFlux MCP Server

  • 19 integrated MCP tools for scanning, rule management, and file handling
  • YARA rule creation, validation, import, update, and deletion
  • URL and file content scanning with detailed match information
  • Secure file upload, storage, and analysis (hex view, string extraction)
  • Storage backends: local filesystem and MinIO/S3
  • JWT authentication and non-root container execution

Use cases of YaraFlux MCP Server

  • AI-assisted malware analysis by scanning files with community YARA rules
  • Threat intelligence automation: import and manage YARA rules from the ThreatFlux repository
  • Incident response: upload suspicious files, scan them, and retrieve detailed results
  • Rule lifecycle management: create, validate, update, and delete YARA rules through a chatbot interface

よくある質問

1

What runtime dependencies does YaraFlux MCP Server require?

Python 3.13+ is required for source installation. Docker is used for containerized deployment. No other external services are strictly required, but MinIO/S3 can be used for remote storage.

2

How is data stored and secured?

By default, uploaded files and scan results are stored on the local filesystem. Optionally, MinIO/S3 storage can be configured. JWT authentication protects the API, and the container runs as a non-root user.

3

What transport and authentication does the server use?

The server uses the Model Context Protocol (MCP) for communication with AI assistants. API access is protected by JWT authentication, configured via the `JWT_SECRET_KEY` environment variable.

4

Can I import existing YARA rules from the ThreatFlux repository?

Yes, the `import_threatflux_rules` tool allows importing rules directly from the ThreatFlux GitHub repository, and rules can be categorized as custom or community.

5

How do I integrate YaraFlux MCP Server with Claude Desktop?

Add a `docker` command entry in Claude Desktop’s `claude_desktop_config.json` under `mcpServers`, setting the required environment variables. After restarting Claude Desktop, the MCP tools become available.

コメント

「その他」の他のコンテンツ

Senso MCP for Joomla

sensomedia

Senso MCP turns a Joomla 5 or 6 site into a remote MCP server. It runs inside Joomla itself (no extra server, no Node.js bridge) and is secured with OAuth 2.1 and Joomla's own ACL. The free pack lets an AI assistant crea

MCP Toolbox for Databases

googleapis

MCP Toolbox for Databases is an open source MCP server for databases.

15.9K

Handl

Handl speaks the Model Context Protocol. Your whole billing operation — projects, invoices, clients, reports, approvals — as tools any AI assistant can call, inside your autonomy rules.

Hindsight

vectorize-io

Hindsight: Agent Memory That Learns

50.4K
N

Next Generation Movers: free moving quotes (remote MCP)

Next Generation Movers

Free moving quotes for AI agents from Next Generation Movers, a licensed interstate mover (USDOT 3764697). US long-distance nationwide and local DC/MD/VA. Indicative ballpark price and booking options; optional $0.01 x40

広告掲載