MCP.so
登录

JoeSandboxMCP MCP Server

@joesecurity

基本信息

分类

其他

传输方式

stdio

作者

joesecurity

提交者

Matthias Vogler

关于 JoeSandboxMCP MCP Server

A Model Context Protocol (MCP) server for interacting with Joe Sandbox Cloud.

#malware-analysis#threatintel#joe-sandbox#phishing

JoeSandboxMCP MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "JoeSandbox": {
      "command": "uv",
      "args": [
        "--directory",
        "/absolute/path/to/joesandboxMCP",
        "run",
        "main.py"
      ],
      "env": {
        "JBXAPIKEY": "your-jbxcloud-apikey",
        "ACCEPTTAC": "SET_TRUE_IF_YOU_ACCEPT"
      }
    }
  }
}

JoeSandboxMCP MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表,不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is JoeSandboxMCP?

JoeSandboxMCP is a Model Context Protocol (MCP) server that integrates with Joe Sandbox Cloud to expose rich analysis and IOC extraction capabilities. It is built for use with MCP-compatible applications like Claude Desktop, Glama, or custom LLM agents.

How to use JoeSandboxMCP?

Clone the repository, install dependencies with uv, and configure the MCP server in your client's JSON settings. Set the environment variables JBXAPIKEY (your API key) and ACCEPTTAC (set to TRUE to accept the terms) in the server configuration. Then launch the server using the provided uv run main.py command.

Key features of JoeSandboxMCP

  • Submit files, URLs, websites, or command lines for analysis
  • Extract IOCs for dropped files, IPs, domains, and URLs
  • Retrieve signature detections and behavioral evidence
  • Visualize process trees with command lines and hierarchy
  • Download unpacked PE files and PCAP network captures
  • All results structured for clear LLM consumption

Use cases of JoeSandboxMCP

  • Submit a suspicious file or URL for dynamic sandbox analysis
  • Retrieve indicators of compromise for threat intelligence feeds
  • Investigate behavioral signatures and process execution trees
  • Download network packet captures for offline C2 analysis
  • Search past submissions by hash, filename, or detection status

常见问题

1

What environment variables are required?

You must set `JBXAPIKEY` to your Joe Sandbox Cloud API key and set `ACCEPTTAC=TRUE` to confirm you have read and accepted the Joe Security Terms and Conditions.

2

How do I install JoeSandboxMCP?

Clone the repo, run `uv venv` and `uv pip install -e .` in the project directory, then configure the MCP server with the command `uv --directory /path/to/joesandboxMCP run main.py`.

3

Can I submit both files and URLs?

Yes – the server supports submitting local files, remote URLs, websites, and command lines for dynamic analysis.

4

What kind of results does the server return?

All results are formatted for easy consumption by language models, including verdicts, scores, process trees, network indicators, signatures, and unpacked binaries.

评论

其他 分类下的更多 MCP 服务器