MalwareTracker Document Malware & AI Safety Scanner

com.malwaretracker/mcp

Scan PDFs, Office docs, and RAG files for malware exploits, macros, CVEs, and AI prompt injection.

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.

{
  "mcpServers": {
    "mcp": {
      "command": "uvx",
      "args": [
        "malwaretracker-mcp"
      ],
      "env": {
        "MALWARETRACKER_API_KEY": "<your MALWARETRACKER_API_KEY>"
      }
    }
  }
}
Environment variables
  • MALWARETRACKER_API_KEYsecretMalwareTracker API key (100 free scans/month at https://api.malwaretracker.com/portal)

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Security & Identity
Version
2.3.0
Registry
active
Published
11/12/2026

On GitHub

read Nov 13, 2026
Stars
0
Forks
0
Last push
Nov 13, 2026
License
MIT

Python

From the README

MalwareTracker & QuickSand MCP Server (malwaretracker-mcp) Official Model Context Protocol (MCP) server for MalwareTracker.com and QuickSand. Inspect untrusted PDFs, Microsoft Office documents (DOC, DOCX, XLS, XLSX, PPT, PPTX, RTF, OneNote), emails (EML, MSG), and RAG ingestion inputs in hidden OOXML instructions, spoofed tags, and Markdown data-exfiltration beacons. • Zero-Retention Compliance — In-memory scanning (?store=false) for SOC 2, HIPAA, and ISO 27001 workflows. Get a free API key (100 scans/month) at https://api.malwaretracker.com/portal. Quickstart Option A: 1-Click Plugin Install (Google Antigravity, Claude Code, Cursor) • Google Antigravity: • Claude Code: • Agent Skills (skills.sh): Option B: Hosted Remote Streamable HTTP + OAuth 2.1 (Zero local install) • Claude.ai / OAuth 2.1 Connectors: Connect directly to https://api.malwaretracker.com/mcp/oauth (supports OAuth 2.1 + PKCE S256, Dynamic Client Registration, Google Sign-In, and API key auth). • Bearer / Header Streamable HTTP (https://api.malwaretracker.com/mcp): Option C: Local stdio via uvx (Recommended for scanning local disk paths) Add to claudedesktopconfig.json, .cursor/mcp.json, or Windsurf / VS Code MCP settings: Or install with pip: Available MCP Tools Built-in MCP Prompt • audituntrusteddocument(file_path) — Enforces a pre-ingestion security audit before an AI agent reads or summarizes an untrusted document. LangChain / LlamaIndex Python Guardrail…

Read the full README on GitHub →

Remotes

  • streamable-httphttps://api.malwaretracker.com/mcp
Browse all Security & Identity →

Add the badge to your site

Show visitors that MalwareTracker Document Malware & AI Safety Scanner is listed here — it’s also the link we check for a free listing.

MalwareTracker Document Malware & AI Safety Scanner — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/com-malwaretracker-mcp?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="MalwareTracker Document Malware & AI Safety Scanner — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![MalwareTracker Document Malware & AI Safety Scanner — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/com-malwaretracker-mcp?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.