# MalwareTracker Document Malware & AI Safety Scanner (slim)

> MalwareTracker Document Malware & AI Safety Scanner, an MCP server by malwaretracker.com, listed from the official MCP registry. Indexed, not reviewed: facts and our own checks, no score or ranking. Scan PDFs, Office docs, and RAG files for malware exploits, macros, CVEs, and AI…

- Full: https://www.anchorterminal.com/tools/malwaretracker-mcp.md (~800 tokens) · this version ~730 tokens · JSON https://www.anchorterminal.com/tools/malwaretracker-mcp.json · canonical https://www.anchorterminal.com/tools/malwaretracker-mcp
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-14
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

# MalwareTracker Document Malware & AI Safety Scanner

> Indexed, not reviewed: facts from the official MCP registry and our own checks. No score, grade or rank, and not in the rankings until the panel reviews it. How the index works: https://www.anchorterminal.com/indexed/

- Kind: MCP server, by malwaretracker.com (https://malwaretracker.com/api.html#mcp)
- Category: Guardrails & safety filters (https://www.anchorterminal.com/categories/guardrails.md)
- Listed because: It's published in the registry under malwaretracker.com, a namespace the registry only gives to whoever proves they control that domain.
- What the official MCP registry says: Scan PDFs, Office docs, and RAG files for malware exploits, macros, CVEs, and AI prompt injection.

## Facts

- MCP registry: `com.malwaretracker/mcp` 2.3.0
- Endpoint: https://api.malwaretracker.com/mcp (streamable HTTP)
- Package: pypi `malwaretracker-mcp` (stdio)
- Source: https://github.com/tylabs/malwaretracker-mcp
- Website: https://malwaretracker.com/api.html#mcp
- PyPI downloads a week: 96
- GitHub stars: 0
- Registry entry updated: 2026-11-12

## Tools

- Tools it lists (5, about 1,143 tokens of context, `tools/list` without credentials, checked 2026-11-14 03:33 UTC):
  - `quicksand_scan_document` (read-only): Scan a PDF, Office document (DOC/DOCX/XLS/XLSX/PPT/PPTX/RTF/OneNote), email, archive, URL, or extracted text in under 100ms for embedded malware exploits,…
  - `quicksand_triage_document` (read-only): Fast Tier-0 SOAR phishing & attachment triage. Evaluates a document in milliseconds and returns verdict ('clean' | 'suspicious' | 'malicious'),…
  - `malwaretracker_lookup_hash` (read-only): Look up a previously analyzed document malware & stream report by MD5, SHA1, SHA256, or SHA512 hash. Does not consume monthly scan quota.
  - `malwaretracker_list_yara_catalog` (read-only): List or filter MalwareTracker's QuickSand YARA signature catalog, covered CVEs, MITRE ATT&CK techniques, and AI/RAG prompt-injection detection rules. Requires…
  - `malwaretracker_get_quota` (read-only): Check current MalwareTracker API plan, monthly scan usage, and remaining quota.
- How its tools read to an agent (0 errors, 0 warnings, 1 note, about 1,143 tokens; rules at https://www.anchorterminal.com/check.md; not part of the score):
  - note TC24 server: 5 of 5 tools have no outputSchema

- JSON: https://www.anchorterminal.com/api/v1/tools/malwaretracker-mcp.json
- Being indexed says nothing about quality, and nobody can pay for it. Ask for a review: https://www.anchorterminal.com/builders/#claiming