Malware Samples

`list_recent_malware_samples`

Returns recently observed malware samples from the malware sample corpus, optionally filtered by file type and look-back window. Costs 1 credit.

POST

tools/call

Cost: 1 credit per successful call · Response shape: array-rows

Parameters

file_typestringoptional

Filter results to a single file type (e.g. exe, dll, pdf). Maximum 32 characters.

daysintegeroptionaldefault: 1

Look-back window in days. Accepted range: 1–7.

limitintegeroptionaldefault: 25

Maximum number of samples to return. Accepted range: 1–100.

Example invocation

Ask your agent: "Show me the executable samples observed in the last 24 hours."

curl -s https://mcp.precursorintelligence.com \
  -H "Authorization: Bearer $PRECURSOR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_recent_malware_samples","arguments":{"file_type":"exe","days":1,"limit":25}}}'

Response

result.content[0].text (parsed)

{
  "count": 3,
  "items": [
    {
      "sha256_hash": "a3f1d2e4b5c6789012345678abcdef901234567890abcdef1234567890abcdef",
      "file_name": "invoice-may-2026.exe",
      "file_type": "exe",
      "signature": "Emotet",
      "first_seen": "2026-05-29T07:33:00Z"
    },
    {
      "sha256_hash": "b7e8f9a0c1d2345678901234567890abcdef1234567890abcdef1234567890ab",
      "file_name": "updater.exe",
      "file_type": "exe",
      "signature": "AgentTesla",
      "first_seen": "2026-05-29T05:12:00Z"
    },
    {
      "sha256_hash": "c9d0e1f2a3b4567890123456789012abcdef567890abcdef567890abcdef56cd",
      "file_name": "setup32.exe",
      "file_type": "exe",
      "signature": "RedLine",
      "first_seen": "2026-05-29T02:47:00Z"
    }
  ],
  "generated_at": "2026-05-29T10:24:31.118Z"
}

The full MCP envelope (including _meta.precursor with request ID and credit details) is described in Response Format.

Errors

Code	Message	When
`-32602`	`invalid_params: file_type: max:32`	`file_type` exceeds 32 characters
`-32602`	`invalid_params: days: min:1`	`days` is less than 1
`-32602`	`invalid_params: days: max:7`	`days` exceeds 7
`-32602`	`invalid_params: limit: min:1`	`limit` is less than 1
`-32602`	`invalid_params: limit: max:100`	`limit` exceeds 100
`-32001`	`unauthorized`	API key is invalid or revoked
`-32002`	`insufficient_credits`	Account credit balance is zero

See Errors for the full error reference.