๐Ÿ”’ File hash verification for AI agents with hashlookup CIRCL API

โšก 342 views ยท ๐Ÿ”’ SecOps & Security Automation

Description

Complete MCP server exposing 11 hashlookup CIRCL API operations to AI agents.

โšก Quick Setup

Need help? Want access to more workflows and even live Q&A sessions with a top verified n8n creator.. All 100% free?

Join the community

  1. Import this workflow into your n8n instance
  2. Credentials Add hashlookup CIRCL API credentials
  3. Activate the workflow to start your MCP server
  4. Copy the webhook URL from the MCP trigger node
  5. Connect AI agents using the MCP URL

๐Ÿ”ง How it Works

This workflow converts the hashlookup CIRCL API into an MCP-compatible interface for AI agents.

โ€ข MCP Trigger: Serves as your server endpoint for AI agent requests โ€ข HTTP Request Nodes: Handle API calls to https://hashlookup.circl.lu โ€ข AI Expressions: Automatically populate parameters via $fromAI() placeholders โ€ข Native Integration: Returns responses directly to the AI agent

๐Ÿ“‹ Available Operations (11 total)

๐Ÿ”ง Bulk (2 endpoints)

โ€ข POST /bulk/md5: Bulk Search MD5 Hashes โ€ข POST /bulk/sha1: Bulk Search SHA1 Hashes

๐Ÿ”ง Children (1 endpoints)

โ€ข GET /children/{sha1}/{count}/{cursor}: Return children from a given SHA1. A number of element to return and an offset must be given. If not set it will be the 100 first elements. A cursor must be given to paginate over. The starting cursor is 0.

๐Ÿ”ง Info (1 endpoints)

โ€ข GET /info: Get Database Info

๐Ÿ”ง Lookup (3 endpoints)

โ€ข GET /lookup/md5/{md5}: Lookup MD5. โ€ข GET /lookup/sha1/{sha1}: Lookup SHA-1. โ€ข GET /lookup/sha256/{sha256}: Lookup SHA-256.

๐Ÿ”ง Parents (1 endpoints)

โ€ข GET /parents/{sha1}/{count}/{cursor}: Return parents from a given SHA1. A number of element to return and an offset must be given. If not set it will be the 100 first elements. A cursor must be given to paginate over. The starting cursor is 0.

๐Ÿ”ง Session (2 endpoints)

โ€ข GET /session/create/{name}: Create a session key to keep search context. The session is attached to a name. After the session is created, the header hashlookup_session can be set to the session name. โ€ข GET /session/get/{name}: Return set of matching and non-matching hashes from a session.

๐Ÿ”ง Stats (1 endpoints)

โ€ข GET /stats/top: Get Top Queries

๐Ÿค– AI Integration

Parameter Handling: AI agents automatically provide values for: โ€ข Path parameters and identifiers โ€ข Query parameters and filters โ€ข Request body data โ€ข Headers and authentication

Response Format: Native hashlookup CIRCL API responses with full data structure

Error Handling: Built-in n8n HTTP request error management

๐Ÿ’ก Usage Examples

Connect this MCP server to any AI agent or workflow:

โ€ข Claude Desktop: Add MCP server URL to configuration โ€ข Cursor: Add MCP server SSE URL to configuration โ€ข Custom AI Apps: Use MCP URL as tool endpoint โ€ข API Integration: Direct HTTP calls to MCP endpoints

โœจ Benefits

โ€ข Zero Setup: No parameter mapping or configuration needed โ€ข AI-Ready: Built-in $fromAI() expressions for all parameters โ€ข Production Ready: Native n8n HTTP request handling and logging โ€ข Extensible: Easily modify or add custom logic

> ๐Ÿ†“ Free for community use! Ready to deploy in under 2 minutes.

๐Ÿ”— Nodes Used

MCP Server Trigger

๐Ÿ“ฅ Import

Download workflow.json and import into n8n: Workflow menu โ†’ Import from File

๐Ÿ“– Importing guide ยท ๐Ÿ”‘ Credential setup