About Urlhaus
Urlhaus is an MCP server published by pipeworx-io in the Data category: uRLhaus MCP — wraps abuse.ch URLhaus malware URL database (free, no auth).
Recent commit activity is the strongest signal that reported issues will get attention.
Install
git clone https://github.com/pipeworx-io/mcp-urlhausThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (4)
get_recentGet a list of recently submitted malware URLs from URLhaus. Useful for monitoring the latest threats.
Parameters not published.
lookup_hostLook up a hostname or IP address in the URLhaus database to find associated malware URLs. Returns all known malicious URLs hosted on that host.
Parameters not published.
lookup_payloadLook up a malware payload file by its MD5 or SHA256 hash in the URLhaus database. Returns file type, size, first/last seen dates, and associated delivery URLs.
Parameters not published.
lookup_urlLook up a URL in the URLhaus malware database to check if it is known to host or distribute malware. Returns threat category, status, blacklist status, and tags.
Parameters not published.
Ask AI
Ask AI about Urlhaus
Powered by Claude · Grounded in docs
Security checks
- ✓README presentThe repository ships documentation.
5 checks have not been run yet.
README
mcp-urlhaus
URLhaus MCP — wraps abuse.ch URLhaus malware URL database (free, no auth)
Part of Pipeworx — an MCP gateway connecting AI agents to 250+ live data sources.
Tools
| Tool | Description |
|---|
Quick Start
Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):
{
"mcpServers": {
"urlhaus": {
"url": "https://gateway.pipeworx.io/urlhaus/mcp"
}
}
}
Or connect to the full Pipeworx gateway for access to all 250+ data sources:
{
"mcpServers": {
"pipeworx": {
"url": "https://gateway.pipeworx.io/mcp"
}
}
}
Using with ask_pipeworx
Instead of calling tools directly, you can ask questions in plain English:
ask_pipeworx({ question: "your question about Urlhaus data" })
The gateway picks the right tool and fills the arguments automatically.
More
License
MIT
README copy captured when this server was indexed; it may lag the repository. The original is authoritative.