1. Conduid
  2. Developer Tools
  3. Triagemcp
MCP server · Developer Tools

Triagemcp

by · github.com/eversinc33/TriageMCP

Vibe Malware Triage - MCP server for static PE analysis.

Unclaimed last commit 9 months ago devtools
InstallView source
53Fair

Scored 4 months ago · breakdown

About Triagemcp

Triagemcp is an MCP server published by eversinc33 in the Developer Tools category: vibe Malware Triage - MCP server for static PE analysis. It has been installed 0 times through Conduid.

The repository has 75 stars and 6 forks, with the last commit 9 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues (0) before depending on it in production.

Install

Install
npx triagemcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Triagemcp

Powered by Claude · Grounded in docs

I know everything about Triagemcp. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

TriageMCP

MCP server to enable an LLM to do basic static triage of a PE.

A minimal prompt idea could be:

You are a malware analyst tasked to analyse the sample at <PATH> with your MCP tools. Create a markdown report that summarizes your findings.

Of course supplying more info will usually yield a better result.

Installation

Install dependencies:

pip install pefile yara-python die-python mcp[cli]

Then adjust triage.py and change <TOOL>_EXE_PATH and YARA_RULE_PATH accordingly.

Claude Desktop Integration

You can install this server in Claude Desktop and interact with it right away by running:

mcp install .\triage.py

Different transport protocol

By default, without using arguments, the server will use stdio transport:

.\triage.py

To use SSE transport:

.\triage.py --transport http://127.0.0.1:8744

TODO

  • VT/AnyRun/Sandbox integration
  • Hash lookup
  • Streamable HTTP transport

README mirrored from the source repository 4 months ago. The original is authoritative.

Questions

About Triagemcp

How do I install Triagemcp?

Run npx triagemcp, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is Triagemcp safe to use with an AI agent?

Its trust score is 53 out of 100 (fair). It passes 0 of 1 static security checks; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Triagemcp still maintained?

The last commit was 9 months ago, with 0 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.