ClamAV MCP

@a2amarket

About ClamAV MCP

ClamAV MCP Server to scan files for viruses

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "ClamAV Scanner": {
      "url": "http://127.0.0.1:8000/sse"
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is ClamAV MCP?

ClamAV MCP is a simple Model Context Protocol server that allows scanning files for viruses using the ClamAV engine. It is built for developers or AI assistants (like Cursor) that need to check files for malware before further processing.

How to use ClamAV MCP?

First ensure ClamAV is installed on your system (see installation instructions for Ubuntu/Debian, Windows, or macOS). Then run the server with uv run mcp run main.py -t sse. It listens for SSE connections on port 8000 by default. To integrate with Cursor, add a configuration entry with the server’s URL pointing to http://[SERVER_IP]:8000/sse.

Key features of ClamAV MCP

Scans files for viruses using the ClamAV engine.
Provides a single scan_file API endpoint.
Accepts file data as a Base64-encoded string.
Returns scan result, raw output, and error information.
Designed for use with AI assistants like Cursor.

Use cases of ClamAV MCP

Scanning user-uploaded files in a chat application before saving.
Checking downloaded attachments for malware in a workflow automation.
Integrating virus scanning into an AI-assistant toolchain that processes files.

FAQ from ClamAV MCP

What does ClamAV MCP do?

It provides an MCP server that lets you scan files for viruses using the ClamAV antivirus engine. You send file data and a filename; the server runs clamscan and returns the result.

What are the system requirements?

ClamAV must be installed on the machine running the server. Installation commands are provided for Ubuntu/Debian (apt-get), Windows (official installer, add to PATH), and macOS (brew install clamav).

How do I start the ClamAV MCP server?

Run uv run mcp run main.py -t sse from the project directory. The server starts on port 8000 and accepts SSE connections.

Can I use ClamAV MCP with Cursor?

Yes. In your Cursor settings, add an MCP server entry with the URL http://[SERVER_IP]:8000/sse and name it, for example, "ClamAV Server".

What parameters does the `scan_file` endpoint expect?

It requires base64_data (Base64-encoded file bytes) and filename (a name for the file). It returns success (boolean), result (raw clamscan output), and error (message if failed).

Frequently asked questions

What does ClamAV MCP do?

It provides an MCP server that lets you scan files for viruses using the ClamAV antivirus engine. You send file data and a filename; the server runs `clamscan` and returns the result.

What are the system requirements?

ClamAV must be installed on the machine running the server. Installation commands are provided for Ubuntu/Debian (`apt-get`), Windows (official installer, add to PATH), and macOS (`brew install clamav`).

How do I start the ClamAV MCP server?

Run `uv run mcp run main.py -t sse` from the project directory. The server starts on port 8000 and accepts SSE connections.

Can I use ClamAV MCP with Cursor?

Yes. In your Cursor settings, add an MCP server entry with the URL `http://[SERVER_IP]:8000/sse` and name it, for example, "ClamAV Server".

What parameters does the `scan_file` endpoint expect?

It requires `base64_data` (Base64-encoded file bytes) and `filename` (a name for the file). It returns `success` (boolean), `result` (raw clamscan output), and `error` (message if failed).