1. Conduid
  2. Developer Tools
  3. Triagemcp
MCP server · Developer Tools

Triagemcp

by · github.com/eversinc33/TriageMCP

Vibe Malware Triage - MCP server for static PE analysis.

Unclaimed devtools
InstallView source
53Fair

Scored 7 days ago · breakdown

About Triagemcp

Triagemcp is an MCP server published by eversinc33 in the Developer Tools category: vibe Malware Triage - MCP server for static PE analysis.

The repository has 78 stars and 6 forks, with the last commit a month ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/eversinc33/TriageMCP

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Triagemcp

Powered by Claude · Grounded in docs

I know everything about Triagemcp. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 6 days ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • !License declaredNo license file. Legally you have no right to use it in a product.
  • !Tests presentNo tests found. Behaviour changes may go unnoticed between versions.
  • !Dependencies pinnedNo lockfile. Installs can pull different code over time.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

OUTDATED: Build a proper agent graph instead

TriageMCP

MCP server to enable an LLM to do basic static triage of a PE.

A minimal prompt idea could be:

You are a malware analyst tasked to analyse the sample at <PATH> with your MCP tools. Create a markdown report that summarizes your findings.

Of course supplying more info will usually yield a better result.

Installation

Install dependencies:

pip install pefile yara-python die-python mcp[cli]

Then adjust triage.py and change <TOOL>_EXE_PATH and YARA_RULE_PATH accordingly.

Claude Desktop Integration

You can install this server in Claude Desktop and interact with it right away by running:

mcp install .\triage.py

Different transport protocol

By default, without using arguments, the server will use stdio transport:

.\triage.py

To use SSE transport:

.\triage.py --transport http://127.0.0.1:8744

TODO

  • VT/AnyRun/Sandbox integration
  • Hash lookup
  • Streamable HTTP transport

README fetched from the repository 6 days ago. The original is authoritative.

Questions

About Triagemcp

How do I install Triagemcp?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Triagemcp safe to use with an AI agent?

Its trust score is 53 out of 100 (fair). It passes 2 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Triagemcp still maintained?

Yes — the last commit was a month ago. The repository has 78 stars and 6 forks.