# ScanMalware.com URL Scanner MCP server

MCP server for ScanMalware.com URL scanning, malware detection, and analysis.

## Links
- Registry page: https://www.getdrio.com/mcp/com-scanmalware-mcp-scanmalware-mcp
- Repository: https://github.com/scanmalware/mcp-server
- Website: https://mcp.scanmalware.com

## Install
- Endpoint: https://mcp.scanmalware.com/mcp
- Auth: Auth required by registry metadata

## Setup notes
- Remote header: Authorization (secret)
- The upstream registry signals required auth or secrets.
- Remote endpoint: https://mcp.scanmalware.com/mcp
- Header: Authorization

## Tools
- get_recent_scans (Get Recent Scans) - Get recent public scans (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- submit_scan (Submit Scan) - Submit a URL for scanning. Endpoint: https://mcp.scanmalware.com/mcp
- get_scan_summary (Get Scan Summary) - Get compact scan summary by scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- wait_for_scan (Wait For Scan) - Poll until a scan reaches a terminal status, returning the final summary. Endpoint: https://mcp.scanmalware.com/mcp
- get_scan_result (Get Scan Result) - Get full scan result by scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- search_scans (Search Scans) - Search scans (q must be at least 3 characters). Endpoint: https://mcp.scanmalware.com/mcp
- get_ai_analysis (Get AI Analysis) - Get AI analysis for a scan_id (if available). Endpoint: https://mcp.scanmalware.com/mcp
- get_scan_progress (Get Scan Progress) - Get scan progress by scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_scan_ioc (Get Scan IOC) - Get IOC matches for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_tls_details (Get TLS Details) - Get TLS details for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_tls_asn1 (Get TLS ASN1) - Get TLS certificate ASN.1 data for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_technologies_by_scan (Get Technologies By Scan) - Get detected technologies for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_bot_protection (Get Bot Protection) - Get bot-protection detection for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_yara_matches (Get YARA Matches) - Get YARA matches for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_jarm_signatures (Get JARM Signatures) - Get JARM signatures for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_analyzer_results (Get Analyzer Results) - Get analyzer results for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_clipboard_events (Get Clipboard Events) - Get clipboard events for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_js_fingerprints (Get JS Fingerprints) - Get JavaScript fingerprints for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_scan_reports (Get Scan Reports) - Get available reports for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_domain_scans (Get Domain Scans) - Get recent scans for a domain. Endpoint: https://mcp.scanmalware.com/mcp
- get_domain_history (Get Domain History) - Get historical scans for a domain (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- get_domain_stats (Get Domain Stats) - Get summary statistics for a domain. Endpoint: https://mcp.scanmalware.com/mcp
- search_by_ip (Search By IP) - Search scans by IP address (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- get_ip_stats (Get IP Stats) - Get IP statistics (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_by_asn (Search By ASN) - Search scans by ASN (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_similar_scans (Search Similar Scans) - Search for scans similar to a scan_id (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_semantic (Search Semantic) - Semantic search over scans (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_by_favicon (Search By Favicon) - Search scans by favicon hash (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_ai_high_risk (Search AI High Risk) - Search AI high-risk scans. Endpoint: https://mcp.scanmalware.com/mcp
- search_ai_scam_type (Search AI Scam Type) - Search AI scans by scam type. Endpoint: https://mcp.scanmalware.com/mcp
- search_ai_classification (Search AI Classification) - Search AI scans by classification. Endpoint: https://mcp.scanmalware.com/mcp
- get_analyzer_stats (Get Analyzer Stats) - Get analyzer statistics overview. Endpoint: https://mcp.scanmalware.com/mcp
- search_analyzer_high_risk (Search Analyzer High Risk) - Search analyzer high-risk scans (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- get_favicon (Get Favicon) - Get favicon metadata for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_favicon_stats (Get Favicon Stats) - Get favicon statistics. Endpoint: https://mcp.scanmalware.com/mcp
- get_screenshot_stats (Get Screenshot Stats) - Get screenshot statistics. Endpoint: https://mcp.scanmalware.com/mcp
- search_similar_screenshots (Search Similar Screenshots) - Search for similar screenshots by hash. Endpoint: https://mcp.scanmalware.com/mcp
- search_ocr (Search OCR) - Search OCR text (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_ocr_pattern (Search OCR Pattern) - Search OCR by pattern (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_by_jarm (Search By JARM) - Search scans by JARM signature (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_by_fuzzy_hash (Search By Fuzzy Hash) - Search scans by fuzzy hash (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_by_screenshot_hash (Search By Screenshot Hash) - Search scans by screenshot hash (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_suspicious_clipboard (Search Suspicious Clipboard) - Search suspicious clipboard indicators (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- get_recent_threats (Get Recent Threats) - Get recent malware threats. Endpoint: https://mcp.scanmalware.com/mcp
- get_recent_yara_threats (Get Recent YARA Threats) - Get recent YARA threats. Endpoint: https://mcp.scanmalware.com/mcp
- get_ct_certificates (Get CT Certificates) - Get certificate transparency data for a domain. Endpoint: https://mcp.scanmalware.com/mcp
- get_ct_dns_records (Get CT DNS Records) - Get CT DNS records for a domain. Endpoint: https://mcp.scanmalware.com/mcp
- get_ct_domains_by_ip (Get CT Domains By IP) - Find CT domains on an IP address. Endpoint: https://mcp.scanmalware.com/mcp
- get_ct_similar_domains (Get CT Similar Domains) - Find similar CT domains for a domain. Endpoint: https://mcp.scanmalware.com/mcp
- get_ct_timeline (Get CT Timeline) - Get CT certificate timeline for a domain. Endpoint: https://mcp.scanmalware.com/mcp
- get_api_root (Get API Root) - Get API root metadata. Endpoint: https://mcp.scanmalware.com/mcp
- get_health (Get Health) - Get API health status. Endpoint: https://mcp.scanmalware.com/mcp
- get_platform_stats (Get Platform Stats) - Get platform statistics. Endpoint: https://mcp.scanmalware.com/mcp
- get_latest_capabilities (Get Latest Capabilities) - Get latest capability stats. Endpoint: https://mcp.scanmalware.com/mcp
- get_capabilities_by_date (Get Capabilities By Date) - Get capability stats by date. Endpoint: https://mcp.scanmalware.com/mcp
- get_clipboard_stats (Get Clipboard Stats) - Get clipboard statistics. Endpoint: https://mcp.scanmalware.com/mcp
- get_cpe_stats (Get CPE Stats) - Get CPE statistics. Endpoint: https://mcp.scanmalware.com/mcp
- get_cpe_by_scan (Get CPE By Scan) - Get CPEs for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- search_cpe (Search CPE) - Search CPEs by pattern (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- get_ids_alerts (Get IDS Alerts) - Get IDS alerts for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_jarm_stats (Get JARM Stats) - Get JARM statistics. Endpoint: https://mcp.scanmalware.com/mcp
- get_malware_stats (Get Malware Stats) - Get malware stats. Endpoint: https://mcp.scanmalware.com/mcp
- get_malware_by_scan (Get Malware By Scan) - Get malware details for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_yara_stats (Get YARA Stats) - Get YARA stats. Endpoint: https://mcp.scanmalware.com/mcp
- get_yara_by_scan (Get YARA By Scan) - Get YARA results for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_safe_browsing_stats (Get Safe Browsing Stats) - Get safe browsing stats. Endpoint: https://mcp.scanmalware.com/mcp
- get_safe_browsing (Get Safe Browsing) - Get safe browsing threats for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_top_tracking_keys (Get Top Tracking Keys) - Get top tracking keys. Endpoint: https://mcp.scanmalware.com/mcp
- search_tracking_key (Search Tracking Key) - Search by tracking key (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_technologies (Search Technologies) - Search technologies (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- get_technology_combinations (Get Technology Combinations) - Get technology combinations (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- get_popular_technologies (Get Popular Technologies) - Get popular technologies (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- get_technology_stats (Get Technology Stats) - Get technology stats. Endpoint: https://mcp.scanmalware.com/mcp
- search_by_nameserver (Search By Nameserver) - Search scans by nameserver. Endpoint: https://mcp.scanmalware.com/mcp
- get_rdap (Get RDAP) - Get RDAP details for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- search_by_registrar (Search By Registrar) - Search scans by registrar (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- submit_scan_report (Submit Scan Report) - Submit a scan report. Endpoint: https://mcp.scanmalware.com/mcp
- get_ocr_stats (Get OCR Stats) - Get OCR stats. Endpoint: https://mcp.scanmalware.com/mcp
- get_ocr_by_scan (Get OCR By Scan) - Get OCR data for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_open_graph (Get Open Graph) - Get Open Graph data for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_pastejacking (Get Pastejacking) - Get pastejacking findings for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_netlog (Get Netlog) - Get network log for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_pcap_metadata (Get PCAP Metadata) - Get PCAP metadata for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- search_favicon_mmh3 (Search Favicon MMH3) - Search favicon by mmh3 hash (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- get_js_fingerprinter2 (Get JS Fingerprinter2) - Get JS Fingerprinter2 results for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_js_fingerprinter2_stats (Get JS Fingerprinter2 Stats) - Get JS Fingerprinter2 stats. Endpoint: https://mcp.scanmalware.com/mcp
- get_js_fingerprinter2_health (Get JS Fingerprinter2 Health) - Get JS Fingerprinter2 health check. Endpoint: https://mcp.scanmalware.com/mcp
- get_js_fingerprinter2_coverage (Get JS Fingerprinter2 Coverage) - Get JS Fingerprinter2 fingerprint coverage. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_obfuscation (Search JS Obfuscation) - Search JS obfuscation signals. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_malware_families (Search JS Malware Families) - Search JS malware families. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_fingerprinter2_composite_hash (Search JS Fingerprinter2 Composite Hash) - Search JS Fingerprinter2 by composite hash. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_fingerprinter2_signature (Search JS Fingerprinter2 Signature) - Search JS Fingerprinter2 by signature. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_fingerprinter2_similar (Search JS Fingerprinter2 Similar) - Search JS Fingerprinter2 similar scans. Endpoint: https://mcp.scanmalware.com/mcp
- get_js_segments_by_scan (Get JS Segments By Scan) - Get JS segments for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_segments_by_hash (Search JS Segments By Hash) - Search JS segments by code hash. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_segments_by_normalized_hash (Search JS Segments By Normalized Hash) - Search JS segments by normalized hash. Endpoint: https://mcp.scanmalware.com/mcp
- get_js_segments_suspicious (Get JS Segments Suspicious) - Get suspicious JS segments for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_js_segments_unknown (Get JS Segments Unknown) - Get unknown JS segments for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- run_js_differential_analysis (Run JS Differential Analysis) - Run JS differential analysis for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp
- get_js_library_inventory (Get JS Library Inventory) - Get JS fingerprint library inventory. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_fingerprint_patterns (Search JS Fingerprint Patterns) - Search JS fingerprints by patterns. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_fingerprint_obfuscated (Search JS Fingerprint Obfuscated) - Search obfuscated JS fingerprints. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_fingerprint_by_server (Search JS Fingerprint By Server) - Search JS fingerprints by server type. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_fingerprint_by_bundler (Search JS Fingerprint By Bundler) - Search JS fingerprints by bundler type. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_fingerprint_by_cdn (Search JS Fingerprint By CDN) - Search JS fingerprints by CDN. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_fingerprint_by_library (Search JS Fingerprint By Library) - Search JS fingerprints by library name. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_fingerprint_by_library_version (Search JS Fingerprint By Library Version) - Search JS fingerprints by library version. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_fingerprint_by_fuzzy_hash (Search JS Fingerprint By Fuzzy Hash) - Search JS fingerprints by fuzzy hash. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_fingerprint_by_md5 (Search JS Fingerprint By MD5) - Search JS fingerprints by MD5 hash. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_fingerprint_by_normalized_hash (Search JS Fingerprint By Normalized Hash) - Search JS fingerprints by normalized hash. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_fingerprint_by_sha1 (Search JS Fingerprint By SHA1) - Search JS fingerprints by SHA1 hash. Endpoint: https://mcp.scanmalware.com/mcp
- search_js_fingerprint_by_sha256 (Search JS Fingerprint By SHA256) - Search JS fingerprints by SHA256 hash. Endpoint: https://mcp.scanmalware.com/mcp
- find_js_fingerprint_similar_by_hash (Find JS Fingerprint Similar By Hash) - Find similar JS fingerprints by hash. Endpoint: https://mcp.scanmalware.com/mcp
- search_jsfingerprints_by_bundler (Search JS Fingerprints By Bundler) - Search JS fingerprints by bundler (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_jsfingerprints_by_library (Search JS Fingerprints By Library) - Search JS fingerprints by library (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_jsfingerprints_by_library_version (Search JS Fingerprints By Library Version) - Search JS fingerprints by library version (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_jsfingerprints_by_fuzzy_hash (Search JS Fingerprints By Fuzzy Hash) - Search JS fingerprints by fuzzy hash (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_jsfingerprints_by_md5 (Search JS Fingerprints By MD5) - Search JS fingerprints by MD5 (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_jsfingerprints_by_normalized_hash (Search JS Fingerprints By Normalized Hash) - Search JS fingerprints by normalized hash (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_jsfingerprints_by_sha1 (Search JS Fingerprints By SHA1) - Search JS fingerprints by SHA1 (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- search_jsfingerprints_by_sha256 (Search JS Fingerprints By SHA256) - Search JS fingerprints by SHA256 (paginated). Endpoint: https://mcp.scanmalware.com/mcp
- get_jsfingerprint (Get JS Fingerprint) - Get JS fingerprint by ID. Endpoint: https://mcp.scanmalware.com/mcp
- get_jsfingerprint_similar (Get JS Fingerprint Similar) - Find similar JS fingerprints. Endpoint: https://mcp.scanmalware.com/mcp
- get_jsfingerprint_similarity_counts (Get JS Fingerprint Similarity Counts) - Get JS fingerprint similarity counts. Endpoint: https://mcp.scanmalware.com/mcp
- get_jsfingerprint_source (Get JS Fingerprint Source) - Get JS fingerprint source. Endpoint: https://mcp.scanmalware.com/mcp
- get_jsfingerprint_bundle_stats (Get JS Fingerprint Bundle Stats) - Get JS fingerprint bundle statistics. Endpoint: https://mcp.scanmalware.com/mcp
- get_jsfingerprint_library_stats (Get JS Fingerprint Library Stats) - Get JS fingerprint library statistics. Endpoint: https://mcp.scanmalware.com/mcp
- get_jsfingerprint_hash_prevalence (Get JS Fingerprint Hash Prevalence) - Get JS fingerprint hash prevalence for a scan_id. Endpoint: https://mcp.scanmalware.com/mcp

## Resources
Not captured

## Prompts
Not captured

## Metadata
- Owner: com.scanmalware.mcp
- Version: 0.1.6
- Runtime: Streamable Http
- Transports: HTTP
- License: Not captured
- Language: Not captured
- Stars: Not captured
- Updated: Jan 7, 2026
- Source: https://registry.modelcontextprotocol.io