# Mlab (mlab.sh)

Enriches IPs, domains, hashes and uploaded files with DNS history, reputation checks and YARA matches, returning graded findings reports.

- Atlas card: https://inite.ai/en/atlas/mlab.sh
- Site: https://mlab.sh
- For: SOC analysts, incident responders and blue teams investigating suspicious indicators, emails and files
- Use not measured/100 · alive 100/100

## Used for

- triage suspicious emails by parsing headers and extracted URLs
- check IPs, domains and hashes against known threat intelligence
- check uploaded attachments against known malicious file hashes

## Price

- from 59 EUR/month, free plan (read 2026-10-16 on https://mlab.sh/pricing)

## For developers

- OpenAPI: https://mlab.sh/openapi.json (40 paths)
- MCP server: sh.mlab/mcp (namespace; auth on 2026-10-16)
- Read 2026-10-16

## MCP server, measured daily

Server: https://mlab.sh/mcp, checked every day since 2026-10-19 (3 checks).

- Answered: measuring, 3 daily checks so far
- Median first answer: 415 ms
- Sign-in: OAuth (the client signs the user in)
- Method: https://inite.ai/en/atlas/mcp/report

## Your data

- Certifications stated: none
- Read 2026-10-16

---

Source: INITE Atlas, https://inite.ai/en/atlas/mlab.sh. JSON: https://inite.ai/api/atlas/mlab.sh. MCP: https://inite.ai/api/mcp (atlas_lookup).