Y

Yaraflux

The YaraFlux MCP Server is a YARA scanning server based on the Model Context Protocol (MCP), providing file YARA rule analysis capabilities for AI assistants. This project uses a modular architecture, integrates 19 MCP tools, supports YARA rule management, file scanning, secure storage, etc., and can be seamlessly integrated with AI assistants such as Claude Desktop.
2.5 points
21

What is the YaraFlux MCP Server?

The YaraFlux MCP Server is a service that provides YARA rule scanning capabilities for AI assistants through a standardized Model Context Protocol interface. It can help users analyze whether files have malicious behaviors, supporting comprehensive rule management, security scanning, and detailed analysis results.

How to use the YaraFlux MCP Server?

Users can upload files, create YARA rules, and trigger scanning tasks through simple commands or a graphical interface. The system will return detailed scanning results, including matching rules and their contexts.

Applicable Scenarios

The YaraFlux MCP Server is suitable for enterprises, security teams, and individual developers who need to perform threat detection on unknown files.

Main Features

YARA Rule ManagementSupports creating, updating, deleting, and validating YARA rules, facilitating users to maintain the threat detection rule library.
URL and File ScanningCan scan URLs on the network or the content of local files to quickly identify potential threats.
Detailed Scanning ResultsProvides context information and complete logs of matching rules for in - depth analysis.
Flexible Storage OptionsSupports local file systems or cloud storage (such as MinIO/S3) as the file storage backend.

Advantages and Limitations

Advantages
A highly modular architecture, easy to expand new functions.
Supports multiple storage methods to meet different needs.
Compatible with mainstream AI assistants, easy to integrate.
Built - in detailed error reporting and debugging tools.
Limitations
Requires certain computing resources to run high - performance scans.
Some advanced functions may require additional configuration to enable.
For non - technical personnel, the initial installation and configuration may be a bit complicated.

How to Use

Install and Start the Server
Download and run the Docker container, or build and run from the source code.
Add YARA Rules
Add new YARA rules through the command - line tool or API.
Scan Files
Upload files or specify URLs to trigger scanning tasks.

Usage Examples

Case 1: Scan an Unknown FileUpload an unknown file and check if it contains known threats.
Case 2: Add Custom RulesDefine your own YARA rules and apply them to file scanning.

Frequently Asked Questions

How to ensure the security of the scanning process?
How to upgrade the server version?
Does it support batch scanning?

Related Resources

Official Documentation
Complete API documentation and usage guide.
GitHub Code Repository
Source code and community discussion area.
Online Demo
Experience the actual effect of YaraFlux.
Installation
Copy the following command to your Client for configuration
{
  "mcpServers": {
    "yaraflux-mcp-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--env",
        "JWT_SECRET_KEY=your-secret-key",
        "--env",
        "ADMIN_PASSWORD=your-admin-password",
        "--env",
        "DEBUG=true",
        "--env",
        "PYTHONUNBUFFERED=1",
        "threatflux/yaraflux-mcp-server:latest"
      ],
      "disabled": false,
      "autoApprove": [
        "scan_url",
        "scan_data",
        "list_yara_rules",
        "get_yara_rule"
      ]
    }
  }
}
Note: Your key is sensitive information, do not share it with anyone.
S
Search1api
The Search1API MCP Server is a server based on the Model Context Protocol (MCP), providing search and crawling functions, and supporting multiple search services and tools.
TypeScript
346
4 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
835
4.3 points
M
MCP Alchemy
Certified
MCP Alchemy is a tool that connects Claude Desktop to multiple databases, supporting SQL queries, database structure analysis, and data report generation.
Python
329
4.2 points
P
Postgresql MCP
A PostgreSQL database MCP service based on the FastMCP library, providing CRUD operations, schema inspection, and custom SQL query functions for specified tables.
Python
114
4 points
M
MCP Scan
MCP-Scan is a security scanning tool for MCP servers, used to detect common security vulnerabilities such as prompt injection, tool poisoning, and cross-domain escalation.
Python
619
5 points
A
Agentic Radar
Agentic Radar is a security scanning tool for analyzing and assessing agentic systems, helping developers, researchers, and security experts understand the workflows of agentic systems and identify potential vulnerabilities.
Python
559
5 points
C
Cloudflare
Changesets is a build tool for managing versions and releases in multi - package or single - package repositories.
TypeScript
1.5K
5 points
E
Edgeone Pages MCP Server
EdgeOne Pages MCP is a service that quickly deploys HTML content to EdgeOne Pages via the MCP protocol and obtains a public URL
TypeScript
257
4.8 points
Featured MCP Services
M
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
1.7K
5 points
N
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
148
4.5 points
G
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
95
4.3 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
835
4.3 points
U
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
572
5 points
F
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
6.7K
4.5 points
C
Context7
Context7 MCP is a service that provides real-time, version-specific documentation and code examples for AI programming assistants. It is directly integrated into prompts through the Model Context Protocol to solve the problem of LLMs using outdated information.
TypeScript
5.2K
4.7 points
G
Gmail MCP Server
A Gmail automatic authentication MCP server designed for Claude Desktop, supporting Gmail management through natural language interaction, including complete functions such as sending emails, label management, and batch operations.
TypeScript
286
4.5 points
AIbase
Zhiqi Future, Your AI Solution Think Tank
© 2025AIbase