ForensicITGuy/assemblyline-mcp

This server enables large language models to interact with Assemblyline v4+ components through a standardized interface for queries, actions, and automation.

โ˜… 0Forks 0GitHub โ†—Compare

README

Assemblyline MCP Logo

Model Context Protocol (MCP) for AssemblyLine!
Explore the docs ยป

Stars Forks Followers


๐Ÿ“š Table of Contents


๐Ÿงพ About

Assemblyline MCP is a modular server implementation for the Model Context Protocol (MCP), providing seamless programmatic integration with Assemblyline malware analysis automation. This project allows you to expose Assemblyline's powerful analysis APIs via MCP, making it easy to connect Assemblyline to other automations, agents, or orchestration platforms.


โœจ Features

  • Modular component system for each Assemblyline API area (alerts, files, services, etc)
  • Real-time task coordination via MCP
  • Extensible configuration interface
  • Designed for integration with industrial automation and cyber defense systems
  • Logging and monitoring of process flows
  • Pythonic, fully type-hinted API surface
  • Compatible with Python 3.9+

๐Ÿš€ Getting Started

Prerequisites

Make sure you have the following installed:

  • Python 3.9+
  • venv
  • Git

Installation

# Clone the repository
git clone https://github.com/brandonlhill/assemblyline-mcp.git

# Navigate into the project directory
cd assemblyline-mcp

# (Optional) Create a virtual environment
python -m venv venv
source venv/bin/activate  # On Windows: venv\Scripts\activate

# Install dependencies
pip install -r requirements.txt

Usage

Configure your Assemblyline MCP server by editing the configuration files or environment variables as needed.

Start the FastMCP server:

python run_server.py

Authors

Acknowledgements

Contributors

brandonlhill

Issues