Back to search
100
MCP live v0.1.1 MCP 2025-11-25 streamable-http

ScanMalware.com URL Scanner

com.scanmalware.mcp/scanmalware-mcp

MCP server for ScanMalware.com URL scanning, malware detection, and analysis.

Uptime
100.0%
5 direct probes · 30d
Response
242ms
last probe
Tools
128
callable
Resources
0
readable
Prompts
0
available
Primary URL
https://mcp.scanmalware.com/mcp
Score: 100/100
Handshake verified by our own probe.
why this score
pass Answers the MCP handshake 50/50
The handshake and the list calls succeeded on the primary URL.
pass Lists tools, resources or prompts 30/30
128 tools, 0 resources, 0 prompts returned.
pass 3 or more catalogue items 10/10
128 items in total; 3 or more earns these points.
pass Describes itself 10/10
77 characters; more than 30 earns these points.

Tools · 128

get_recent_scans

Get recent public scans (paginated).

submit_scan

Submit a URL to ScanMalware for scanning. WARNING: scan_type defaults to 'public', which publishes the target URL and scan results in the public feed and makes them visible to other users and search e…

get_scan_summary

Get compact scan summary by scan_id.

wait_for_scan

Poll until a scan reaches a terminal status, returning the final summary.

get_scan_result

Get full scan result by scan_id.

search_scans

Search scans (q must be at least 3 characters).

get_ai_analysis

Get AI analysis for a scan_id (if available).

get_scan_progress

Get scan progress by scan_id.

get_scan_ioc

Get IOC matches for a scan_id.

get_tls_details

Get TLS details for a scan_id.

get_tls_asn1

Get TLS certificate ASN.1 data for a scan_id.

get_technologies_by_scan

Get detected technologies for a scan_id.

get_bot_protection

Get bot-protection detection for a scan_id.

get_yara_matches

Get YARA matches for a scan_id.

get_jarm_signatures

Get JARM signatures for a scan_id.

get_analyzer_results

Get analyzer results for a scan_id.

get_clipboard_events

Get clipboard events for a scan_id.

get_js_fingerprints

Get JavaScript fingerprints for a scan_id.

get_scan_reports

Get available reports for a scan_id.

get_domain_scans

Get recent scans for a domain.

get_domain_history

Get historical scans for a domain (paginated).

get_domain_stats

Get summary statistics for a domain.

search_by_ip

Search scans by IP address (paginated).

get_ip_stats

Get IP statistics (paginated).

search_by_asn

Search scans by ASN (paginated).

search_similar_scans

Search for scans similar to a scan_id (paginated).

search_semantic

Semantic search over scans (paginated).

search_by_favicon

Search scans by favicon hash (paginated).

search_ai_high_risk

Search AI high-risk scans.

search_ai_scam_type

Search AI scans by scam type.

search_ai_classification

Search AI scans by classification.

get_analyzer_stats

Get analyzer statistics overview.

search_analyzer_high_risk

Search analyzer high-risk scans (paginated).

get_favicon

Get the favicon for a scan_id: size, hashes, and the image itself base64-encoded. Use the md5 with search_by_favicon to pivot.

get_favicon_stats

Get favicon statistics. This aggregate query can take up to 90 seconds by default.

get_screenshot_stats

Get screenshot statistics.

search_similar_screenshots

Search for similar screenshots by hash.

search_ocr

Search OCR text (paginated). q must contain at least 3 characters after trimming. This query can take up to 90 seconds by default; allow it to finish before retrying.

search_ocr_pattern

Search OCR by pattern (paginated).

search_by_jarm

Search scans by JARM signature (paginated).

search_by_fuzzy_hash

Search scans by fuzzy hash (paginated).

search_by_screenshot_hash

Search scans by screenshot hash (paginated).

search_suspicious_clipboard

Search suspicious clipboard indicators (paginated).

get_recent_threats

Get recent malware threats.

get_recent_yara_threats

Get recent YARA threats.

get_ct_certificates

Get certificate transparency data for a domain.

get_ct_dns_records

Get CT DNS records for a domain.

get_ct_domains_by_ip

Find CT domains on an IP address.

get_ct_similar_domains

Find similar CT domains for a domain.

get_ct_timeline

Get CT certificate timeline for a domain.

get_api_root

Get API root metadata.

get_health

Get API health status.

get_platform_stats

Get platform statistics.

get_latest_capabilities

Get latest capability stats.

get_capabilities_by_date

Get capability stats by date.

get_clipboard_stats

Get clipboard statistics.

get_cpe_stats

Get CPE statistics.

get_cpe_by_scan

Get CPEs for a scan_id.

search_cpe

Search CPEs by pattern (paginated).

get_ids_alerts

Get IDS alerts for a scan_id.

get_jarm_stats

Get JARM statistics.

get_malware_stats

Get malware stats.

get_malware_by_scan

Get malware details for a scan_id.

get_yara_stats

Get YARA stats.

get_yara_by_scan

Get YARA results for a scan_id.

get_safe_browsing_stats

Get safe browsing stats.

get_safe_browsing

Get safe browsing threats for a scan_id.

get_top_tracking_keys

Get top tracking keys.

search_tracking_key

Search by tracking key (paginated).

search_technologies

Search technologies (paginated).

get_technology_combinations

Get technology combinations (paginated).

get_popular_technologies

Get popular technologies (paginated).

get_technology_stats

Get technology stats.

search_by_nameserver

Search scans by nameserver.

get_rdap

Get RDAP details for a scan_id.

search_by_registrar

Search scans by registrar (paginated).

submit_scan_report

Submit a scan report.

get_ocr_stats

Get OCR stats.

get_ocr_by_scan

Get OCR data for a scan_id.

get_open_graph

Get Open Graph data for a scan_id.

get_pastejacking

Get pastejacking findings for a scan_id.

get_netlog

Describe the network log (Chrome NetLog) for a scan_id: whether one exists, its size, and its encoding. The log itself is not returned - these are routinely tens of megabytes gzipped.

get_pcap_metadata

Get PCAP metadata for a scan_id.

search_favicon_mmh3

Search favicon by mmh3 hash (paginated).

get_js_fingerprinter2

Get JS Fingerprinter2 results for a scan_id.

get_js_fingerprinter2_stats

Get JS Fingerprinter2 stats.

get_js_fingerprinter2_health

Get JS Fingerprinter2 health check.

get_js_fingerprinter2_coverage

Get JS Fingerprinter2 fingerprint coverage.

search_js_obfuscation

Search JS obfuscation signals. Supply at least one of risk_level, min_risk_score, or has_eval; limit alone is not a filter. For example, use has_eval=true. Explicit false and a min_risk_score of 0 are…

search_js_malware_families

Search JS malware families. Supply min_cluster_size (at least 1) or similarity_threshold (0 to 1), or both; limit alone is not a filter. For example, use min_cluster_size=2.

search_js_fingerprinter2_composite_hash

Search JS Fingerprinter2 by composite hash.

search_js_fingerprinter2_signature

Search JS Fingerprinter2 by signature.

search_js_fingerprinter2_similar

Search JS Fingerprinter2 similar scans.

get_js_segments_by_scan

Get JS segments for a scan_id.

search_js_segments_by_hash

Search JS segments by code hash.

search_js_segments_by_normalized_hash

Search JS segments by normalized hash.

get_js_segments_suspicious

Get suspicious JS segments for a scan_id.

get_js_segments_unknown

Get unknown JS segments for a scan_id.

run_js_differential_analysis

Run JS differential analysis for a scan_id.

get_js_library_inventory

Get JS fingerprint library inventory.

search_js_fingerprint_patterns

Search JS fingerprints by patterns. Supply at least one boolean filter: has_eval, has_crypto, has_websocket, high_entropy, no_library, or cdn_mismatch. For example, use has_eval=true. Explicit false i…

search_js_fingerprint_obfuscated

Search obfuscated JS fingerprints.

search_js_fingerprint_by_server

Search JS fingerprints by server type.

search_js_fingerprint_by_bundler

Search JS fingerprints by bundler type.

search_js_fingerprint_by_cdn

Search JS fingerprints by CDN.

search_js_fingerprint_by_library

Search JS fingerprints by detected library name. Use identifiers from get_js_library_inventory, such as 'react' or 'nextjs'. The display name 'Next.js' is accepted as an alias for 'nextjs'.

search_js_fingerprint_by_library_version

Search JS fingerprints by library version.

search_js_fingerprint_by_fuzzy_hash

Search JS fingerprints by fuzzy hash.

search_js_fingerprint_by_md5

Search JS fingerprints by MD5 hash.

search_js_fingerprint_by_normalized_hash

Search JS fingerprints by normalized hash.

search_js_fingerprint_by_sha1

Search JS fingerprints by SHA1 hash.

search_js_fingerprint_by_sha256

Search JS fingerprints by SHA256 hash.

find_js_fingerprint_similar_by_hash

Find similar JS fingerprints by hash.

search_jsfingerprints_by_bundler

Search JS fingerprints by bundler (paginated).

search_jsfingerprints_by_library

Search JS fingerprints by library (paginated).

search_jsfingerprints_by_library_version

Search JS fingerprints by library version (paginated).

search_jsfingerprints_by_fuzzy_hash

Search JS fingerprints by fuzzy hash (paginated).

search_jsfingerprints_by_md5

Search JS fingerprints by MD5 (paginated).

search_jsfingerprints_by_normalized_hash

Search JS fingerprints by normalized hash (paginated).

search_jsfingerprints_by_sha1

Search JS fingerprints by SHA1 (paginated).

search_jsfingerprints_by_sha256

Search JS fingerprints by SHA256 (paginated).

get_jsfingerprint

Get JS fingerprint by ID.

get_jsfingerprint_similar

Find similar JS fingerprints.

get_jsfingerprint_similarity_counts

Get JS fingerprint similarity counts.

get_jsfingerprint_source

Get JS fingerprint source.

get_jsfingerprint_bundle_stats

Get JS fingerprint bundle statistics.

get_jsfingerprint_library_stats

Get JS fingerprint library statistics.

get_jsfingerprint_hash_prevalence

Get JS fingerprint hash prevalence for a scan_id.

How to use

Add to your Claude Desktop / Cursor / Cline MCP config:

{
  "mcpServers": {
    "scanmalware.com_url_scanner": {
      "url": "https://mcp.scanmalware.com/mcp",
      "transport": "streamable-http"
    }
  }
}