# MCP server for direct file hash lookups in CIRCL via AI agents
This automation template enables AI agents to directly query file information from the CIRCL hashlookup database via a standard HTTP API, translating requests through an MCP-compatible interface. It eliminates manual hash lookups and seamlessly integrates external threat intelligence into automated security workflows.
## Who it´s for
- Cybersecurity analysts using AI agents for threat investigation
- Developers integrating external APIs into AI systems via MCP
- SOC analysts automating file hash checks in detection processes
## What the automation does
- Receives requests from AI agents via HTTP webhook in MCP format
- Extracts parameters (e.g., MD5, SHA1, SHA256) using $fromAI() expressions
- Forwards queries to official CIRCL hashlookup API endpoints
- Supports 11 operations: single/bulk lookups, parent/child relations, session management, top queries
- Returns responses in original format without data structure modifications
## What´s included
- Ready-to-use n8n workflow with MCP support
- Logic for handling all 11 API endpoints
- Integration exclusively with CIRCL hashlookup API and HTTP triggers
- Basic textual guide for deployment and testing
## Requirements for setup
- n8n instance (self-hosted or cloud)
- Access to an MCP server or compatible AI agent
- Stable internet connection to reach
https://hashlookup.circl.lu
## Benefits and outcomes
- Faster analysis of suspicious files via direct AI access
- Reduced analyst workload — automated lookups without context switching
- Bulk and session-based querying for complex investigations
- Compatibility with any AI agent supporting MCP interfaces
- Transparent data relay preserving original response structure
## Important: template only
Important: you are purchasing a ready-made automation workflow template only. Rollout into your infrastructure, connecting specific accounts and services, 1:1 setup help, custom adjustments for non-standard stacks and any consulting support are provided as a separate paid service at an individual rate. To discuss custom work or 1:1 help, contact via chat