Malwagon

Name: Malwagon
Author: com.malwagon

MCP serverMCP

Submit files and URLs to a malware sandbox, poll scans, fetch reports, hashes and IOCs.

by com.malwagonhomepage ↗v1.1.0

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"malwagon","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability108/108 checks ok

when	check	result	http	latency	detail
7 h ago	mcp initialize	ok	200	201 ms	server Malwagon 1.0.0 · protocol 2025-06-18 · 5 tools
13 h ago	mcp initialize	ok	200	167 ms	server Malwagon 1.0.0 · protocol 2025-06-18 · 5 tools
20 h ago	mcp initialize	ok	200	208 ms	server Malwagon 1.0.0 · protocol 2025-06-18 · 5 tools
27 h ago	mcp initialize	ok	200	144 ms	server Malwagon 1.0.0 · protocol 2025-06-18 · 5 tools
34 h ago	mcp initialize	ok	200	179 ms	server Malwagon 1.0.0 · protocol 2025-06-18 · 5 tools
2 d ago	mcp initialize	ok	200	194 ms	server Malwagon 1.0.0 · protocol 2025-06-18 · 5 tools
2 d ago	mcp initialize	ok	200	147 ms	server Malwagon 1.0.0 · protocol 2025-06-18 · 5 tools
2 d ago	mcp initialize	ok	200	145 ms	server Malwagon 1.0.0 · protocol 2025-06-18 · 5 tools
3 d ago	mcp initialize	ok	200	175 ms	server Malwagon 1.0.0 · protocol 2025-06-18 · 5 tools
3 d ago	mcp initialize	ok	200	645 ms	server Malwagon 1.0.0 · protocol 2025-06-18 · 5 tools

Tools observed via MCP handshake

lookup_hash — Find analyses of a known SHA-256 digest. Returns the caller's own scans of those bytes plus any publicly shared scan of them. Sends nothing anywhere: this searc
get_report — The derived analysis report for one scan: verdict, capabilities, behaviour summary, observed operations and defanged indicators. Derived data only - it never co
search_indicator — Find scans where an indicator was observed: an IP, a domain, a URL, a mutex, a registry key, a hash or a JA3/JA4 fingerprint. The indicator is matched exactly;
poll_scan — The current status of one scan, for polling after submit_scan. Cheap enough to call in a loop. 'terminal' means the scan will not change again; 'report_availabl
submit_scan — Queue a new analysis of a target that can be named as text: a SHA-256 to look up, a URL to visit, a command to run, or a package to install. Uploading a file or

Declared by sources

What the publisher says

Attributed to the source that supplied each field. Treated as claims, not facts.

No long description beyond the summary.

kind Official MCP Registry

name Official MCP Registry

summary Official MCP Registry

version Official MCP Registry

description Official MCP Registry

homepageUrl Official MCP Registry

publisherName Official MCP Registry

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registrycom.malwagon/malwagon

first seen 1 mo ago · fetched 20 h agoopen ↗

Field history (7 recent events)

28 d ago · declared · version → "1.1.0"
1 mo ago · declared · description → "Submit files and URLs to a malware sandbox, poll scans, fetch reports, hashes and IOCs."
1 mo ago · declared · publisherName → "com.malwagon"
1 mo ago · declared · summary → "Submit files and URLs to a malware sandbox, poll scans, fetch reports, hashes and IOCs."
1 mo ago · declared · version → "1.0.0"
1 mo ago · declared · protocols → ["mcp"]
1 mo ago · declared · homepageUrl → "https://malwagon.com"

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from