MCP server · Audited from source

Qu1cksc0pe MCP server

by cyb3rmx/qu1cksc0peGPL-3.0 licenceAudited 23 Sep 2026 · source 94b5aa2fee38

streamable-http★ 2,060

✕BLOCKGrade F · 40/100 · 23 Sep 2026 · 94b5aa2

Safer alternatives View source on GitHub ↗

Is it safe? No — BLOCK, grade F (40/100). It exposes 14 tools: 11 read, 3 write and 0 destructive. The audit recorded 47 findings (1 critical, 6 high, 26 medium, 12 low). Maintainer's description: All-in-One malware analysis tool.

Ask an AI about this pageGChatGPT CClaude PPerplexity GeGemini XGrok

CoCopilot AIGoogle AI Mode

Cite

Cite this page

ModelsAtlas. “Qu1cksc0pe MCP server (cyb3rmx/qu1cksc0pe)”. Retrieved 23 Sep 2026. https://modelsatlas.com/mcp/cyb3rmx/qu1cksc0pe

Why this is BLOCK. The audit found 1 critical and 6 high findings; the most severe is Obfuscation / stealth at Modules/pcap_analyzer.py:500. Each finding is listed below with its file and line.

Why this page is still public. People search for this server by name. Hiding it would leave them with the README's word alone; here they see what the code does. We list it so you can decide, and we do not show connect commands for BLOCK servers.

Trust audit

Audit 0.4.1 · full source read 23 Sep 2026

Trust score40/100✕BLOCK F

1 critical6 high26 medium12 low2 info

47 findings, listed below with the file and line each was found on. Grade A needs a sandboxed behavioural run too; this audit read the source only.

What the source does

FilesystemDeclared10 observations
NetworkDeclared16 observations
ShellDeclared7 observations
DependenciesNot pinnedSome ranges float
SecretsNone foundNo keys in source

Findings (47)

Sorted by severity · the 25 most severe of 47 are listed

CRITICALObfuscation / stealthobf.decode_then_exec · Modules/pcap_analyzer.py:500

F-07 Obfuscation / stealthCWE-506 · CWE-94Layer L1

unhexlify( ... os.system(

Why: decodes a payload and executes it
Fix: —

HIGHNetwork egressnet.tls_off · Modules/powershell_emulator.py:5885

F-04 Network egressCWE-200 · CWE-319Layer L1

switches = {'-L', '--location', '-k', '--insecure', '-s', '--silent', '-S', '--show-error',

Why: certificate verification is disabled
Fix: leave verification on

HIGHPrivilege escalation / persistencepriv.escalate · Dockerfile:7

F-06 Privilege escalation / persistenceCWE-269 · CWE-250Layer L1

RUN apt update && apt install -y curl wget git binutils sudo unzip python3 python3-pip default-jre file

Why: asks for elevated privileges
Fix: —

HIGHPrivilege escalation / persistencepriv.escalate · Modules/analysis/linux/linux_emulator.py:369

F-06 Privilege escalation / persistenceCWE-269 · CWE-250Layer L1

print(f"{infoS} Add your user to docker group or use sudo for Docker-based emulation.")

Why: asks for elevated privileges
Fix: —

HIGHPrivilege escalation / persistencepriv.escalate · Modules/apkAnalyzer.py:547

F-06 Privilege escalation / persistenceCWE-269 · CWE-250Layer L1

print(f"{infoS} Install Java (example): [bold green]sudo apt-get install default-jre-headless[white]")

Why: asks for elevated privileges
Fix: —

HIGHPrivilege escalation / persistencepriv.escalate · Modules/apple_analyzer.py:136

F-06 Privilege escalation / persistenceCWE-269 · CWE-250Layer L1

rb"sudo ", rb"/usr/bin/sudo", rb"chmod +s", rb"chown root",

Why: asks for elevated privileges
Fix: —

HIGHPrivilege escalation / persistencepriv.escalate · Modules/document_analyzer.py:168

F-06 Privilege escalation / persistenceCWE-269 · CWE-250Layer L1

print("Try 'sudo -H pip3 install -U oletools' command.")

Why: asks for elevated privileges
Fix: —

MEDIUMInventory / provenanceinv.binary · Systems/Windows/windows_debug_signatures

F-13 Inventory / provenanceCWE-1104Layer L0

windows_debug_signatures

Why: a compiled or binary member cannot be reviewed from source
Fix: ship source, or explain the binary in the README

MEDIUMPrivilege escalation / persistencefs.persistence · Modules/analysis/multiple/smart_analyzer.py:526

F-06 Privilege escalation / persistenceCWE-269 · CWE-250Layer L1

"powershell", "cmd.exe", "wscript", "cscript", "rundll32", "reg.exe", "schtasks",

Why: No further detail recorded for this rule.
Fix: —

MEDIUMPrivilege escalation / persistencefs.persistence · Modules/analysis/multiple/smart_analyzer.py:594

F-06 Privilege escalation / persistenceCWE-269 · CWE-250Layer L1

"execution": ("cmd.exe", "powershell", "wscript", "cscript", "rundll32", "mshta", "regsvr32", "schtasks", "shell.run"),

Why: No further detail recorded for this rule.
Fix: —

MEDIUMPrivilege escalation / persistencefs.persistence · Modules/analysis/multiple/smart_analyzer.py:596

F-06 Privilege escalation / persistenceCWE-269 · CWE-250Layer L1

"persistence": ("currentversion\\run", "runonce", "startup", "schtasks", "service"),

Why: No further detail recorded for this rule.
Fix: —

MEDIUMPrivilege escalation / persistencefs.persistence · Modules/analysis/multiple/smart_analyzer.py:1114

F-06 Privilege escalation / persistenceCWE-269 · CWE-250Layer L1

"rundll32", "reg", "reg.exe", "schtasks", "schtasks.exe", "mshta", "mshta.exe",

Why: No further detail recorded for this rule.
Fix: —

MEDIUMPrivilege escalation / persistencefs.persistence · Modules/apple_analyzer.py:133

F-06 Privilege escalation / persistenceCWE-269 · CWE-250Layer L1

rb"com.apple.launchd", rb"crontab",

Why: No further detail recorded for this rule.
Fix: —

MEDIUMFilesystem / pathfs.system_paths · Modules/apple_analyzer.py:131

F-05 Filesystem / pathCWE-22 · CWE-59Layer L1

rb"/Library/LaunchDaemons/", rb"/Library/LaunchAgents/",

Why: No further detail recorded for this rule.
Fix: —

MEDIUMFilesystem / pathfs.system_paths · Modules/apple_analyzer.py:141

F-05 Filesystem / pathCWE-22 · CWE-59Layer L1

rb"/etc/passwd", rb"/private/etc/sudoers",

Why: No further detail recorded for this rule.
Fix: —

MEDIUMFilesystem / pathfs.system_paths · Modules/apple_analyzer.py:142

F-05 Filesystem / pathCWE-22 · CWE-59Layer L1

rb"\.ssh/", rb"id_rsa", rb"authorized_keys", rb"/root/",

Why: No further detail recorded for this rule.
Fix: —

MEDIUMFilesystem / pathfs.system_paths · Modules/installer.sh:18

F-05 Filesystem / pathCWE-22 · CWE-59Layer L1

CONF_FILE="/etc/qu1cksc0pe.conf"

Why: No further detail recorded for this rule.
Fix: —

MEDIUMFilesystem / pathfs.system_paths · build_deb.sh:224

F-05 Filesystem / pathCWE-22 · CWE-59Layer L1

CONF_FILE="/etc/qu1cksc0pe.conf"

Why: No further detail recorded for this rule.
Fix: —

MEDIUMNetwork egressnet.beacon_words · Modules/vba_emulator/scoring.py:240

F-04 Network egressCWE-200 · CWE-319Layer L1

"(possible fingerprinting/exfiltration)",

Why: No further detail recorded for this rule.
Fix: —

MEDIUMNetwork egressnet.raw_ip · Modules/analysis/multiple/smart_analyzer.py:125

F-04 Network egressCWE-200 · CWE-319Layer L1

return os.environ.get("OLLAMA_HOST", "http://127.0.0.1:11434").rstrip("/")

Why: No further detail recorded for this rule.
Fix: —

MEDIUMNetwork egressnet.raw_ip · Modules/analysis/multiple/smart_analyzer.py:1820

F-04 Network egressCWE-200 · CWE-319Layer L1

print("[bold cyan][[bold red]*[bold cyan]][white] Install Ollama or set OLLAMA_HOST (default: http://127.0.0.1:11434).")

Why: No further detail recorded for this rule.
Fix: —

MEDIUMNetwork egressnet.raw_ip · Modules/languageDetect.py:254

F-04 Network egressCWE-200 · CWE-319Layer L1

host = str(os.environ.get("OLLAMA_HOST", "http://127.0.0.1:11434")).rstrip("/")

Why: No further detail recorded for this rule.
Fix: —

MEDIUMNetwork egressnet.raw_ip · Modules/packerAnalyzer.py:139

F-04 Network egressCWE-200 · CWE-319Layer L1

host = str(os.environ.get("OLLAMA_HOST", "http://127.0.0.1:11434")).rstrip("/")

Why: No further detail recorded for this rule.
Fix: —

MEDIUMObfuscation / stealthobf.anti_debug · Modules/apkAnalyzer.py:367

F-07 Obfuscation / stealthCWE-506 · CWE-94Layer L1

"process_exec": ("system(", "popen(", "execve", "fork", "kill(", "ptrace", "prctl"),

Why: No further detail recorded for this rule.
Fix: —

MEDIUMObfuscation / stealthobf.anti_debug · Modules/apkAnalyzer.py:369

F-07 Obfuscation / stealthCWE-506 · CWE-94Layer L1

"anti_debug": ("ptrace", "TracerPid", "ro.debuggable", "ro.secure"),

Why: No further detail recorded for this rule.
Fix: —

Tools it exposes

14 declared in source · 0 destructive

11 read3 write0 destructive

Tool	What it does	Risk
`configure_ai_api_key`	Save an API key for one of the cloud AI providers used by ai_provider on the analysis tools.	write
`configure_virustotal_api_key`	Save a VirusTotal API key for use by scan_virustotal (equivalent to `qu1cksc0pe.py --key_init --key_provider virustotal`).	write
`update_hash_database`	Download/refresh Qu1cksc0pe	write
`analyze_archive`	Analyze an archive file (.zip, .rar, .ace, ...): lists contents and scans nested files for IOCs/YARA matches.	read
`analyze_document`	Analyze a document/macro/VBScript-family file (.doc, .xls, .vbs, .vbe, .vba, .vb, .bas, .cls, .frm, ...).	read
`analyze_file`	Auto-detect a file	read
`check_resources`	Extract and inspect a PE file	read
`check_signatures`	Scan a file for embedded/carved file signatures (e.g. an EXE hidden inside another file type).	read
`detect_language`	Fingerprint the programming language(s) used to build a binary.	read
`detect_packer`	Check whether a binary (or every file in a folder) is packed with a known packer.	read
`extract_iocs`	Extract URLs, IP addresses and email addresses embedded in a file.	read
`list_supported_file_types`	List the file types Qu1cksc0pe recognizes and which tool to use for each. Call this first if unsure which tool applies to a file.	read
`scan_hash`	Look up a file	read
`scan_virustotal`	Look up a file	read

Safer alternatives

All security servers →

MalwareBazaar✓SAFE

mytechnotalent/malwarebazaar_mcp

An AI-driven MCP server that autonomously interfaces with Malware Bazaar, delivering real-time threat intel and sample metadata for authorized cybersecurity research workflows.

4 readGrade B

VirusTotal✓SAFE

burtthecoder/mcp-virustotal

MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.

5 readGrade B

x64dbg✓SAFE

bromoket/x64dbg_mcp

Drive x64dbg with your AI. MCP server: 23 mega-tools / 153 endpoints for breakpoints, memory, disasm, tracing, anti-debug & PE dumping. Claude/Cursor/Windsurf/Cline. All local.

8 writeGrade B

Audit history

2026-09-23
✕BLOCK F 40 / 100
Source changed, verdict held · 94b5aa2fee38
2026-09-12
✕BLOCK F 40 / 100
First audit · 66e037a7b48f

README badge

Badges show the current verdict, BLOCK included

A badge cannot be hidden by the maintainer while the verdict is BLOCK. Fix the findings, push, and the re-audit updates it.

Questions about Qu1cksc0pe MCP server

What is the Qu1cksc0pe MCP server?

All-in-One malware analysis tool.

What tools does Qu1cksc0pe expose?

14 in total: 11 read-only, 3 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Qu1cksc0pe safe to connect to an agent?

No — not without reading the findings first. The audit graded it F (40/100) and found 7 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does Qu1cksc0pe need?

It reads SC0PE_AI_INTERESTING_PATTERNS_MAX_KEYS and SC0PE_WEB_SECRET from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does Qu1cksc0pe run?

It speaks streamable-http, so it runs as a service you connect to over the network.

How current is this page?

The grade is for one exact copy of the source (94b5aa2fee38), read on 2026-09-23. The repository is watched and re-audited when it changes.

I already installed Qu1cksc0pe. What should I do?

Remove it from your client's MCP configuration, then rotate any API keys and tokens that were in your environment while it ran.

Can the verdict change?

Yes. The repository is watched and re-audited when its source changes. If the findings are removed the verdict updates, and the history on this page shows it.

Sources

cyb3rmx/qu1cksc0pe on GitHub — the source we read, its licence, stars and activityObserved · 23 Sep 2026
ModelsAtlas trust audit — BLOCK verdict for commit 94b5aa2fee38Observed · 23 Sep 2026

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.

What is the Qu1cksc0pe MCP server?
GChatGPT CClaude PPerplexity
What tools does Qu1cksc0pe expose?
GChatGPT CClaude PPerplexity
Is Qu1cksc0pe safe to connect to an agent?
GChatGPT CClaude PPerplexity