REST API

Submit files and retrieve analysis reports from your own tools (SOAR, SIEM, sandboxes, scripts). The full reference is available in the interactive Swagger documentation.

Authentication

Create an API key in Account › API Keys & Webhooks, then send it in the X-Api-Key header of every request. Keep it secret: it acts on behalf of your account.

Base URL

https://v1.api-p.malva.re

Endpoints

Method	Path	Purpose
`PUT`	`/api/sample/upload`	Submit a file (multipart field `file`, 50 MB max). Counts against your weekly quota.
`GET`	`/api/sample/meta/{hash}`	Sample metadata (hashes, type, verdict, tags).
`GET`	`/api/sample/report/{hash}`	Full analysis report (JSON).

Example

curl -X PUT https://v1.api-p.malva.re/api/sample/upload \
  -H "X-Api-Key: $MALVA_API_KEY" \
  -F "file=@sample.bin"

curl https://v1.api-p.malva.re/api/sample/report/<md5> \
  -H "X-Api-Key: $MALVA_API_KEY"

Webhooks

Register a webhook in the same account page to be notified when an analysis completes. Each call is signed with an X-Malva-Signature header so you can verify it comes from Malva.RE.

Visibility

Reports of public submissions are readable by anyone. Private reports are returned only to their owner and the members of the submitting organization; other callers receive 404.