Arkana MCP Server
JameZUK/Arkana
[](https://agentrank-ai.com/tool/JameZUK--Arkana/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) Arkana - Your entire malware analysis lab, behind one AI prompt. 250+ MCP tools for binary analysis with Claude Code or other MCP
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
JameZUK/Arkana is a Python tool licensed under MIT. Arkana - Your entire malware analysis lab, behind one AI prompt. 250+ MCP tools for binary analysis with Claude Code or other MCP Topics: binary, cybersecurity-tools, malware-analysis, malware-analyzer, malware-research, mcp-server, reverse-engineering.
Ranked #5254 out of 24846 indexed tools.
Ecosystem
Score Breakdown
248 stars → growing community
Last commit 2mo ago → moderate activity
4/9 issues closed → many open issues
5 contributors → small team
No dependents → no downstream usage
Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →
How to Improve
Badge all embed codes →
[](https://agentrank-ai.com/tool/JameZUK--Arkana/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) <a href="https://agentrank-ai.com/tool/JameZUK--Arkana/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge"><img src="https://agentrank-ai.com/api/v1/badge/JameZUK--Arkana" alt="AgentRank"></a> Matched Queries
From the README
# Arkana - Your Entire Malware Analysis Lab, Behind One AI Prompt > *"Analyse asyncrat.exe and tell me what it does"* From a single prompt, Arkana opens the binary, triages it (CRITICAL -- 43/72 VT detections), extracts the C2 server (`cveutb.sa.com`), identifies AES-256 encrypted communications via MessagePack, maps 12 MITRE ATT&CK techniques, detects anti-VM checks for VMware/VirtualBox/ Sandboxie, finds the persistence mechanism (Registry Run key), and recovers the operator's PDB path revealing a Vietnamese-speaking threat actor. [See the full report.](docs/examples/example-report-asyncrat.md) > *"Step through the unpacking stub and show me what it decrypts"* Arkana starts an interactive debug session, sets breakpoints on `VirtualAlloc` and `VirtualProtect`, steps through the decryption loop, snapshots state before and after, diffs the memory regions, and dumps the unpacked payload -- all driven by natural language. Arkana is a [Model Context Protocol](https://modelcontextprotoRead full README on GitHub →
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.