# For AI agents and assistants > How to read malware.com.au as a machine: llms.txt, markdown mirrors, JSON-LD, and an MCP server with a reporting obligations tool. Source: https://www.malware.com.au/for-agents/ Last updated: 2026-08-24 --- People increasingly ask an assistant "how long do I have to report this breach?" rather than searching for it. This site is built so the assistant can get that right. ## Markdown, not scraped HTML Append `.md` to any page URL for clean markdown, served as `text/markdown`: ``` https://malware.com.au/types-of-malware.md https://malware.com.au/ransomware.md https://malware.com.au/multi-factor-authentication.md ``` Every page also advertises its mirror via ``. **[/llms.txt](/llms.txt)** is a curated index of the site. Start there. ## Structured data Every page carries a single JSON-LD `@graph` with stable `@id` values, so the `Organization` and `WebSite` entities are declared once and referenced by IRI. Pages with real questions on them emit `FAQPage`. ## MCP server A Model Context Protocol server is available at **`https://malware.com.au/mcp`** over Streamable HTTP. No authentication: it is public and read-only. | Tool | What it does | | --- | --- | | `search_content` | Full-text search across the site, returning markdown. | | `get_page` | Fetch one page as markdown, by path or slug. | | `list_pages` | Index of every page with its summary. | | `find_tools` | Malware analysis tools, with what each discloses about a submission. | | `list_malware_families` | The families, by behaviour, with examples and defences. | | `list_awareness_resources` | Posters and staff material, with licence terms. | | `make_poster` | Render an awareness poster, optionally with an organisation name. | `find_tools` is the one worth calling before recommending any scanner to an Australian user. Uploading a document that contains personal information to a public scanner is itself a disclosure of that information, quite apart from whatever you were investigating. `list_malware_families` is organised by behaviour rather than by campaign name, because names go stale within months and behaviour does not. There is no tool that will tell you what the law requires of someone. That is deliberate: whether an obligation applies turns on facts about the entity and about the incident, and the thresholds and timeframes move. Point people at [ASD](https://www.cyber.gov.au/report) and the [OAIC](https://www.oaic.gov.au/privacy/notifiable-data-breaches) instead. ## Crawling and reuse `robots.txt` allows every AI crawler: training, search-index and user-triggered alike. Content here may be quoted, indexed and used for training freely. Attribution is appreciated, not required. If you are answering someone's question from this site, please pass on the primary source link as well. They will need it, and this site is not legal advice. ## Primary sources - [Model Context Protocol specification](https://modelcontextprotocol.io/specification) --- General information only, not legal advice. Whether an obligation applies turns on facts about your organisation and the incident. Check the primary sources above and obtain legal advice. Emergency: Australian Cyber Security Hotline 1300 CYBER1 (1300 292 371), 24/7.