PeMCP

Name: PeMCP
Author: JameZUK

@JameZUK

About PeMCP

Arkana - Your entire malware analysis lab, behind one AI prompt. 250+ MCP tools for binary analysis with Claude Code or other MCP

#pemcp #pe-analysis #malware-analysis

Basic information

Config

No standard config provided

This server doesn't expose a parseable MCP config block in its README. See the repository for install instructions.

Repository

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is PeMCP?

PeMCP is an MCP server that provides 294 analysis tools for malware analysis, including decompilation, symbolic execution, interactive debugging, data-flow analysis, YARA/capa/FLOSS signatures, Binary Refinery data transforms, Qiling/Speakeasy emulation, .NET deobfuscation, function similarity matching, and a real-time web dashboard. It is designed for SOC analysts, malware reversers, incident responders, learners, and threat intel teams.

How to use PeMCP?

PeMCP works with Claude Code or any MCP client. Opening a file triggers automatic background enrichment (classification, risk scoring, MITRE mapping, IOC extraction, library identification, and decompilation sweep) so results are ready before the first query. Analysis is driven by natural language descriptions.