广告合作
MCP.so
登录

YaraFlux MCP Server

@ThreatFlux

代码仓库

基本信息

分类

其他

许可证

MIT

传输方式

stdio

作者

ThreatFlux

关于 YaraFlux MCP Server

A yara based MCP Server

YaraFlux MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "YaraFlux": {
      "command": "docker",
      "args": [
        "pull",
        "threatflux/yaraflux-mcp-server:latest"
      ]
    }
  }
}

YaraFlux MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is YaraFlux MCP Server?

YaraFlux MCP Server is a Model Context Protocol (MCP) server that gives AI assistants the ability to analyze files using YARA rules. It integrates YARA-based threat scanning with LLMs, supporting comprehensive rule management, secure scanning, and result analysis through a modular architecture.

How to use YaraFlux MCP Server?

Run it with Docker (docker pull threatflux/yaraflux-mcp-server:latest and docker run with the required JWT_SECRET_KEY, ADMIN_PASSWORD, and DEBUG environment variables) or install from source (requires Python 3.13+, then make install and make run). For Claude Desktop, add a docker entry to claude_desktop_config.json with the appropriate environment variables and auto-approved tools.

Key features of YaraFlux MCP Server

  • 19 integrated MCP tools for scanning, rule management, and file handling
  • YARA rule creation, validation, import, update, and deletion
  • URL and file content scanning with detailed match information
  • Secure file upload, storage, and analysis (hex view, string extraction)
  • Storage backends: local filesystem and MinIO/S3
  • JWT authentication and non-root container execution

Use cases of YaraFlux MCP Server

  • AI-assisted malware analysis by scanning files with community YARA rules
  • Threat intelligence automation: import and manage YARA rules from the ThreatFlux repository
  • Incident response: upload suspicious files, scan them, and retrieve detailed results
  • Rule lifecycle management: create, validate, update, and delete YARA rules through a chatbot interface

常见问题

1

What runtime dependencies does YaraFlux MCP Server require?

Python 3.13+ is required for source installation. Docker is used for containerized deployment. No other external services are strictly required, but MinIO/S3 can be used for remote storage.

2

How is data stored and secured?

By default, uploaded files and scan results are stored on the local filesystem. Optionally, MinIO/S3 storage can be configured. JWT authentication protects the API, and the container runs as a non-root user.

3

What transport and authentication does the server use?

The server uses the Model Context Protocol (MCP) for communication with AI assistants. API access is protected by JWT authentication, configured via the `JWT_SECRET_KEY` environment variable.

4

Can I import existing YARA rules from the ThreatFlux repository?

Yes, the `import_threatflux_rules` tool allows importing rules directly from the ThreatFlux GitHub repository, and rules can be categorized as custom or community.

5

How do I integrate YaraFlux MCP Server with Claude Desktop?

Add a `docker` command entry in Claude Desktop’s `claude_desktop_config.json` under `mcpServers`, setting the required environment variables. After restarting Claude Desktop, the MCP tools become available.

评论

其他 分类下的更多 MCP 服务器

Health by Dr Brad

Dr Brad Stanfield

Health by Dr Brad works out a health plan from your own results: which screening is due at your age, and evidence-based suggestions, each with the reason and the published guideline or study behind it. Your record is one

YOUB

Connect your AI assistant to your own YOUB endurance training account. Read recorded activities with full analysis, planned sessions, race goals, wellness (HRV, sleep, resting HR) and your athletic profile. Create or mov

Glasswarp

Glasswarp

See and control a real Windows PC you own — from any MCP client, locally or remotely. Observe (UIA + screenshots), click/type/drag/scroll, launch apps, owner Live View. BYOH: your machine, your key.

MaxKB

1Panel-dev

🔥 MaxKB is an open-source platform for building enterprise-grade agents. 强大易用的开源企业级智能体平台。

22.0K
P

PickFu MCP

PickFu MCP is a Model Context Protocol (MCP) server that connects AI assistants, developers, marketers, product managers, and AI agents to PickFu's consumer research platform. It enables users to create surveys, conduct

广告合作