SSyncDev

JoesandboxMCP MCP Server

A Model Context Protocol (MCP) server for interacting with [Joe Sandbox Cloud](https://jbxcloud.joesecurity.org/). This server exposes rich analysis

Local serverstdio

What is the JoesandboxMCP MCP Server?

Joesandboxmcp mcp server lets Claude, Cursor and other MCP clients work with JoesandboxMCP directly. A Model Context Protocol (MCP) server for interacting with Joe Sandbox Cloud. This server exposes rich analysis and IOC extraction capabilities from Joe Sandbox and integrates cleanly into any MCP-compatible application (e.g. Claude Desktop, Glama, or custom LLM.

What JoesandboxMCP does

A Model Context Protocol (MCP) server for interacting with Joe Sandbox Cloud. This server exposes rich analysis and IOC extraction capabilities from Joe Sandbox and integrates cleanly into any MCP-compatible application (e.g. Claude Desktop, Glama, or custom LLM agents).

Key capabilities

  • Flexible Submission — Submit local files, remote URLs, websites, or command lines for dynamic analysis
  • IOC Extraction — Retrieve indicators of compromise for dropped files, IPs, domains, and URLs
  • Signature Detections — Retrieve and extract actionable evidence from sandbox signatures
  • Process Trees — Visualize full execution hierarchies, including command lines and parent-child relationships
  • Unpacked PE Files — Download in-memory unpacked binaries extracted during execution, often revealing runtime payloads
  • PCAP Downloads — Retrieve the full network traffic capture (PCAP) recorded during analysis for offline inspection
  • LLM-Suitable Responses — All results are structured for clear consumption by language models, with truncation and relevant filtering

Practical notes

  • Maintained by joesecurity.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

How to install the JoesandboxMCP MCP Server

{
  "mcpServers": {
    "JoeSandbox": {
      "command": "uv",
      "args": [
        "--directory",
        "/absolute/path/to/joesandboxMCP",
        "run",
        "main.py"
      ],
      "env": {
        "JBXAPIKEY": "YOUR_JBXAPIKEY",
        "ACCEPTTAC": "SET_TRUE_IF_YOU_ACCEPT"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

VariableDescriptionRequired
JBXAPIKEYDeclared in the maintainer’s client configuration.Check documentation
ACCEPTTACDeclared in the maintainer’s client configuration.Check documentation

Frequently asked questions

A Model Context Protocol (MCP) server for interacting with [Joe Sandbox Cloud](https://jbxcloud.joesecurity.org/). This server exposes rich analysis and IOC Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.

Alternatives to the JoesandboxMCP MCP Server

Puppeteer

Official

The original Chromium automation reference server — simple, screenshot-driven browser control.

Browser AutomationTypeScript★ 63.0k

Fonoster

Build a programmable telecommunications stack for connecting telephony services with the Internet via a cloud-based utility.

AI & ML ServicesTypeScript★ 8.1k

Blockrun MCP

BlockRun MCP Server - Give your AI agent web search, deep research, prediction markets, and crypto data. Paid via x402 micropayments.

Search & Web ScrapingRemoteGo

🌐 Nostr MCP Server

A Model Context Protocol (MCP) server that enables AI models to interact with Nostr, allowing them to post notes and interact with the freedom of speech protocol.

AI & ML Services

MCP Docs Search Server

This is a lightweight, plug-and-play MCP server that empowers any LLM to dynamically search and retrieve up-to-date documentation from popular AI

AI & ML Services

Kiwify

Kiwify digital-products platform, sales (list, detail), subscriptions (list, cancel), products and a

AI & ML ServicesRemote