Yaraflux
The YaraFlux MCP Server is a YARA scanning server based on the Model Context Protocol (MCP), providing file YARA rule analysis capabilities for AI assistants. This project uses a modular architecture, integrates 19 MCP tools, supports YARA rule management, file scanning, secure storage, etc., and can be seamlessly integrated with AI assistants such as Claude Desktop.
2.5 points
4.8K

What is the YaraFlux MCP Server?

The YaraFlux MCP Server is a service that provides YARA rule scanning capabilities for AI assistants through a standardized Model Context Protocol interface. It can help users analyze whether files have malicious behaviors, supporting comprehensive rule management, security scanning, and detailed analysis results.

How to use the YaraFlux MCP Server?

Users can upload files, create YARA rules, and trigger scanning tasks through simple commands or a graphical interface. The system will return detailed scanning results, including matching rules and their contexts.

Applicable Scenarios

The YaraFlux MCP Server is suitable for enterprises, security teams, and individual developers who need to perform threat detection on unknown files.

Main Features

YARA Rule Management
Supports creating, updating, deleting, and validating YARA rules, facilitating users to maintain the threat detection rule library.
URL and File Scanning
Can scan URLs on the network or the content of local files to quickly identify potential threats.
Detailed Scanning Results
Provides context information and complete logs of matching rules for in - depth analysis.
Flexible Storage Options
Supports local file systems or cloud storage (such as MinIO/S3) as the file storage backend.
Advantages
A highly modular architecture, easy to expand new functions.
Supports multiple storage methods to meet different needs.
Compatible with mainstream AI assistants, easy to integrate.
Built - in detailed error reporting and debugging tools.
Limitations
Requires certain computing resources to run high - performance scans.
Some advanced functions may require additional configuration to enable.
For non - technical personnel, the initial installation and configuration may be a bit complicated.

How to Use

Install and Start the Server
Download and run the Docker container, or build and run from the source code.
Add YARA Rules
Add new YARA rules through the command - line tool or API.
Scan Files
Upload files or specify URLs to trigger scanning tasks.

Usage Examples

Case 1: Scan an Unknown File
Upload an unknown file and check if it contains known threats.
Case 2: Add Custom Rules
Define your own YARA rules and apply them to file scanning.

Frequently Asked Questions

How to ensure the security of the scanning process?
How to upgrade the server version?
Does it support batch scanning?

Related Resources

Official Documentation
Complete API documentation and usage guide.
GitHub Code Repository
Source code and community discussion area.
Online Demo
Experience the actual effect of YaraFlux.

Installation

Copy the following command to your Client for configuration
{
  "mcpServers": {
    "yaraflux-mcp-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--env",
        "JWT_SECRET_KEY=your-secret-key",
        "--env",
        "ADMIN_PASSWORD=your-admin-password",
        "--env",
        "DEBUG=true",
        "--env",
        "PYTHONUNBUFFERED=1",
        "threatflux/yaraflux-mcp-server:latest"
      ],
      "disabled": false,
      "autoApprove": [
        "scan_url",
        "scan_data",
        "list_yara_rules",
        "get_yara_rule"
      ]
    }
  }
}
Note: Your key is sensitive information, do not share it with anyone.

Alternatives

M
MCP
The Microsoft official MCP server provides search and access functions for the latest Microsoft technical documentation for AI assistants
9.6K
5 points
A
Aderyn
Aderyn is an open - source Solidity smart contract static analysis tool written in Rust, which helps developers and security researchers discover vulnerabilities in Solidity code. It supports Foundry and Hardhat projects, can generate reports in multiple formats, and provides a VSCode extension.
Rust
6.1K
5 points
D
Devtools Debugger MCP
The Node.js Debugger MCP server provides complete debugging capabilities based on the Chrome DevTools protocol, including breakpoint setting, stepping execution, variable inspection, and expression evaluation.
TypeScript
5.6K
4 points
S
Scrapling
Scrapling is an adaptive web scraping library that can automatically learn website changes and re - locate elements. It supports multiple scraping methods and AI integration, providing high - performance parsing and a developer - friendly experience.
Python
8.3K
5 points
M
Mcpjungle
MCPJungle is a self-hosted MCP gateway used to centrally manage and proxy multiple MCP servers, providing a unified tool access interface for AI agents.
Go
0
4.5 points
C
Cipher
Cipher is an open-source memory layer framework designed for programming AI agents. It integrates with various IDEs and AI coding assistants through the MCP protocol, providing core functions such as automatic memory generation, team memory sharing, and dual-system memory management.
TypeScript
0
5 points
N
Nexus
Nexus is an AI tool aggregation gateway that supports connecting multiple MCP servers and LLM providers, providing tool search, execution, and model routing functions through a unified endpoint, and supporting security authentication and rate limiting.
Rust
0
4 points
S
Shadcn Ui MCP Server
An MCP server that provides shadcn/ui component integration for AI workflows, supporting React, Svelte, and Vue frameworks. It includes functions for accessing component source code, examples, and metadata.
TypeScript
11.2K
5 points
N
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
15.0K
4.5 points
M
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
24.0K
5 points
G
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
16.0K
4.3 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
45.9K
4.3 points
U
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
20.5K
5 points
F
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
45.5K
4.5 points
G
Gmail MCP Server
A Gmail automatic authentication MCP server designed for Claude Desktop, supporting Gmail management through natural language interaction, including complete functions such as sending emails, label management, and batch operations.
TypeScript
16.1K
4.5 points
M
Minimax MCP Server
The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.
Python
30.0K
4.8 points
AIBase
Zhiqi Future, Your AI Solution Think Tank
© 2025AIBase