What environment variables are required?
You must set `JBXAPIKEY` to your Joe Sandbox Cloud API key and set `ACCEPTTAC=TRUE` to confirm you have read and accepted the Joe Security Terms and Conditions.
JoeSandboxMCP MCP Server
@joesecurity
Basic information
About JoeSandboxMCP MCP Server
A Model Context Protocol (MCP) server for interacting with Joe Sandbox Cloud.
JoeSandboxMCP MCP Server config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"JoeSandbox": {
"command": "uv",
"args": [
"--directory",
"/absolute/path/to/joesandboxMCP",
"run",
"main.py"
],
"env": {
"JBXAPIKEY": "your-jbxcloud-apikey",
"ACCEPTTAC": "SET_TRUE_IF_YOU_ACCEPT"
}
}
}
}JoeSandboxMCP MCP Server tools
Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is JoeSandboxMCP?
JoeSandboxMCP is a Model Context Protocol (MCP) server that integrates with Joe Sandbox Cloud to expose rich analysis and IOC extraction capabilities. It is built for use with MCP-compatible applications like Claude Desktop, Glama, or custom LLM agents.
How to use JoeSandboxMCP?
Clone the repository, install dependencies with uv, and configure the MCP server in your client's JSON settings. Set the environment variables JBXAPIKEY (your API key) and ACCEPTTAC (set to TRUE to accept the terms) in the server configuration. Then launch the server using the provided uv run main.py command.
Key features of JoeSandboxMCP
- Submit files, URLs, websites, or command lines for analysis
- Extract IOCs for dropped files, IPs, domains, and URLs
- Retrieve signature detections and behavioral evidence
- Visualize process trees with command lines and hierarchy
- Download unpacked PE files and PCAP network captures
- All results structured for clear LLM consumption
Use cases of JoeSandboxMCP
- Submit a suspicious file or URL for dynamic sandbox analysis
- Retrieve indicators of compromise for threat intelligence feeds
- Investigate behavioral signatures and process execution trees
- Download network packet captures for offline C2 analysis
- Search past submissions by hash, filename, or detection status
Frequently asked questions
How do I install JoeSandboxMCP?
Clone the repo, run `uv venv` and `uv pip install -e .` in the project directory, then configure the MCP server with the command `uv --directory /path/to/joesandboxMCP run main.py`.
Can I submit both files and URLs?
Yes – the server supports submitting local files, remote URLs, websites, and command lines for dynamic analysis.
What kind of results does the server return?
All results are formatted for easy consumption by language models, including verdicts, scores, process trees, network indicators, signatures, and unpacked binaries.
More Other MCP servers
YOUB
Connect your AI assistant to your own YOUB endurance training account. Read recorded activities with full analysis, planned sessions, race goals, wellness (HRV, sleep, resting HR) and your athletic profile. Create or mov
Health by Dr Brad
Dr Brad StanfieldHealth by Dr Brad works out a health plan from your own results: which screening is due at your age, and evidence-based suggestions, each with the reason and the published guideline or study behind it. Your record is one
Codelf
unbugA search tool helps dev to solve the naming things problem.
14.2K
Handl
Handl speaks the Model Context Protocol. Your whole billing operation — projects, invoices, clients, reports, approvals — as tools any AI assistant can call, inside your autonomy rules.
P
PickFu MCP
PickFu MCP is a Model Context Protocol (MCP) server that connects AI assistants, developers, marketers, product managers, and AI agents to PickFu's consumer research platform. It enables users to create surveys, conduct
Comments