Be the first to get access to new connectors. Get early access →
ConnectorBay Early access
Discover
YARAify (BYOK) icon

YARAify (BYOK)

Look up malware files in abuse.ch YARAify by hash, YARA rule, ClamAV signature or similarity hash, plus recently deployed public YARA rules, with your own Auth-Key

Unify Dynamics LLC

Tools10read-only
Sign-inBYOKbring your own key
Key keptNeverused for one call only
PriceFreeoptional Pro limits
ProviderYARAifyunofficial, not affiliated
Works withMCP · RESTany agent

Try asking

Real questions, and the tools your agent calls to answer them.

What does YARAify know about file hash b0bb095dd0ad8b8de1c83b13c38e68dd?
Tools called
lookup_file_hash
What were the YARAify scan results for task fb2763e9-7b84-11ec-9f01-42010aa4000b?
Tools called
get_task_results
Which files in YARAify carry YARA rule MALWARE_Win_Neshta?
Tools called
get_files_by_yara_rule
Which files in YARAify carry ClamAV signature Win.Dropper.Gh0stRAT-978?
Tools called
get_files_by_clamav_signature
Which files in YARAify carry imphash 680b9682922177224183342c?
Tools called
get_files_by_imphash
Which files in YARAify carry TLSH hash T140551236C8E05951CAEFD7?
Tools called
get_files_by_tlsh

About

YARAify (BYOK) lets an AI assistant read your own YARAify data through the YARAify API with a key you supply (abuse.ch Auth-Key). Read-only: 10 tools (lookup_file_hash, get_task_results, get_files_by_yara_rule, get_files_by_clamav_signature, get_files_by_imphash, get_files_by_tlsh, get_files_by_telfhash, get_files_by_gimphash, get_files_by_icon_dhash, list_recent_yara_rules). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to yaraify-api.abuse.ch. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by YARAify. YARAify and its logos are trademarks of their owners and are used only to say which service the connector works with.

Sources: Live from the YARAify API (yaraify-api.abuse.ch) with a BYOK key; documentation: https://yaraify.abuse.ch/api/. Endpoints checked against that documentation on 2026-10-16.

Privacy

The publisher, Unify Dynamics LLC, states that tool inputs are processed in memory and not retained.

Data not collectedNo account, no profile, no stored prompts or results.

What it can do

10 tools, grouped by job. Every one is read-only or compute-only.

OpenAPI
Read your data10 tools
  • Lookup file hashLook up one file in YARAify by SHA256, MD5, SHA1 or SHA3-384 hash: file metadata, similarity hashes and the scan tasks that touched it with YARA…
  • Get task resultsGet the status and scan results (YARA and ClamAV matches, unpacked files) of one YARAify scan task by its task id.
  • Get files by yara ruleList recent files known to YARAify that share a match for one YARA rule, with hashes, size, type, sightings and first and last seen dates.
  • Get files by clamav signatureList recent files known to YARAify that share a match for one ClamAV signature, with hashes, size, type, sightings and first and last seen dates.
  • Get files by imphashList recent files known to YARAify that share the same import hash (imphash), with hashes, size, type, sightings and first and last seen dates.
  • Get files by tlshList recent files known to YARAify that share a similar TLSH fuzzy hash, with hashes, size, type, sightings and first and last seen dates.
  • Get files by telfhashList recent files known to YARAify that share the same telfhash (ELF import hash), with hashes, size, type, sightings and first and last seen dates.
  • Get files by gimphashList recent files known to YARAify that share the same gimphash (Go import hash), with hashes, size, type, sightings and first and last seen dates.
  • Get files by icon dhashList recent files known to YARAify that share the same icon difference hash, with hashes, size, type, sightings and first and last seen dates.
  • List recent yara rulesList the most recently deployed public (TLP:WHITE) YARA rules on YARAify with rule name, author, description, licence and Malpedia family.

Information

PublisherUnify Dynamics LLC
CategorySafety
LanguagesEnglish
Built forWorldwide
CompatibilityAny MCP client · any agent · REST
Version0.1.0
MCP endpointhttps://byok-yaraify.connectorbay.com/mcp
REST APIopenapi.json
SupportGet help · Status
CountryWorldwide
FunctionOther
LayerDeep connectors

More like this

More in Other

Databox (BYOK)

Read your Databox accounts, data sources, datasets, metrics, databoards, sync history and usage with your own Databox API key

Live · MCP + REST12 tools

DaData (BYOK)

Look up Russian and CIS addresses, companies, individual entrepreneurs, banks and IP locations from DaData with your own API key

Live · MCP + REST8 tools

TalentLMS (BYOK)

Read your TalentLMS users, courses, categories, groups, branches, course progress and domain usage with your own API key

Live · MCP + REST10 tools

Lucca (BYOK)

Read your Lucca HR directory (employees, departments, establishments, legal units) and office work locations with your own API key

Live · MCP + REST8 tools

Unified API (BYOK)

Read employees, groups, locations, time off and ATS jobs from the HR or recruiting systems connected to your Unified account, with your own key (no pay, ID or birth data)

Live · MCP + REST6 tools

Vacation Tracker (BYOK)

Read departments, locations, holidays, labels, leave types, leave requests, users and leave balances from your Vacation Tracker workspace with your own API key

Live · MCP + REST8 tools

Get YARAify (BYOK)

Free · BYOK · Read-only

BYOK: bring your own keyThis connector uses your own YARAify abuse.ch Auth-Key. Create one at https://auth.abuse.ch/, with the fewest permissions it needs (read-only if the provider offers it). Your assistant sends it in the X-Upstream-Key header with every request. It is used for that one call only: never stored, logged or cached, and only ever sent to YARAify. Revoke it at the provider whenever you like. Unofficial connector: not affiliated with YARAify.