mcp server
ScanMalware.com URL Scanner
MCP server for ScanMalware.com URL scanning, malware detection, and analysis.
Description as published by the maintainer. Source
- version 0.1.6
- active
active — Most recent push to the repository was 2026-08-06.
What this server can do
128 functions, named and described by the server itself. Parameter names are shown because they say more about what a function does than its name usually does.
find_js_fingerprint_similar_by_hash(limit, threshold, content_sha256, exclude_exact_matches)- Find similar JS fingerprints by hash. Required: content_sha256.
get_ai_analysis(scan_id)- Get AI analysis for a scan_id (if available). Required: scan_id.
get_analyzer_results(scan_id)- Get analyzer results for a scan_id. Required: scan_id.
get_analyzer_stats- Get analyzer statistics overview.
get_api_root- Get API root metadata.
get_bot_protection(scan_id)- Get bot-protection detection for a scan_id. Required: scan_id.
get_capabilities_by_date(scan_date)- Get capability stats by date. Required: scan_date.
get_clipboard_events(scan_id)- Get clipboard events for a scan_id. Required: scan_id.
get_clipboard_stats- Get clipboard statistics.
get_cpe_by_scan(scan_id)- Get CPEs for a scan_id. Required: scan_id.
get_cpe_stats- Get CPE statistics.
get_ct_certificates(domain)- Get certificate transparency data for a domain. Required: domain.
get_ct_dns_records(domain)- Get CT DNS records for a domain. Required: domain.
get_ct_domains_by_ip(ip_address)- Find CT domains on an IP address. Required: ip_address.
get_ct_similar_domains(domain)- Find similar CT domains for a domain. Required: domain.
get_ct_timeline(domain)- Get CT certificate timeline for a domain. Required: domain.
get_domain_history(page, limit, domain)- Get historical scans for a domain (paginated). Required: domain.
get_domain_scans(limit, domain, status)- Get recent scans for a domain. Required: domain.
get_domain_stats(domain)- Get summary statistics for a domain. Required: domain.
get_favicon(scan_id)- Get favicon metadata for a scan_id. Required: scan_id.
get_favicon_stats- Get favicon statistics.
get_health- Get API health status.
get_ids_alerts(scan_id)- Get IDS alerts for a scan_id. Required: scan_id.
get_ip_stats(page, limit, ip_address)- Get IP statistics (paginated). Required: ip_address.
get_jarm_signatures(scan_id)- Get JARM signatures for a scan_id. Required: scan_id.
get_jarm_stats- Get JARM statistics.
get_js_fingerprinter2(scan_id, include_detailed_events)- Get JS Fingerprinter2 results for a scan_id. Required: scan_id.
get_js_fingerprinter2_coverage- Get JS Fingerprinter2 fingerprint coverage.
get_js_fingerprinter2_health- Get JS Fingerprinter2 health check.
get_js_fingerprinter2_stats- Get JS Fingerprinter2 stats.
get_js_fingerprints(scan_id, include_functions, include_http_headers, include_vectors_info)- Get JavaScript fingerprints for a scan_id. Required: scan_id.
get_js_library_inventory(library, min_count)- Get JS fingerprint library inventory.
get_js_segments_by_scan(limit, offset, scan_id, script_url)- Get JS segments for a scan_id. Required: scan_id.
get_js_segments_suspicious(limit, offset, scan_id, min_risk_score)- Get suspicious JS segments for a scan_id. Required: scan_id.
get_js_segments_unknown(limit, offset, scan_id, min_code_length)- Get unknown JS segments for a scan_id. Required: scan_id.
get_jsfingerprint(fingerprint_id, include_functions, include_http_headers)- Get JS fingerprint by ID. Required: fingerprint_id.
get_jsfingerprint_bundle_stats(to_date, from_date)- Get JS fingerprint bundle statistics.
get_jsfingerprint_hash_prevalence(scan_id)- Get JS fingerprint hash prevalence for a scan_id. Required: scan_id.
get_jsfingerprint_library_stats(to_date, from_date, min_count)- Get JS fingerprint library statistics.
get_jsfingerprint_similar(limit, offset, threshold, fingerprint_id, exclude_same_scan)- Find similar JS fingerprints. Required: fingerprint_id.
get_jsfingerprint_similarity_counts(max_count, threshold, fingerprint_id)- Get JS fingerprint similarity counts. Required: fingerprint_id.
get_jsfingerprint_source(fingerprint_id)- Get JS fingerprint source. Required: fingerprint_id.
get_latest_capabilities- Get latest capability stats.
get_malware_by_scan(scan_id)- Get malware details for a scan_id. Required: scan_id.
get_malware_stats- Get malware stats.
get_netlog(scan_id)- Get network log for a scan_id. Required: scan_id.
get_ocr_by_scan(scan_id)- Get OCR data for a scan_id. Required: scan_id.
get_ocr_stats- Get OCR stats.
get_open_graph(scan_id)- Get Open Graph data for a scan_id. Required: scan_id.
get_pastejacking(scan_id)- Get pastejacking findings for a scan_id. Required: scan_id.
get_pcap_metadata(scan_id)- Get PCAP metadata for a scan_id. Required: scan_id.
get_platform_stats- Get platform statistics.
get_popular_technologies(days, page, limit)- Get popular technologies (paginated).
get_rdap(scan_id)- Get RDAP details for a scan_id. Required: scan_id.
get_recent_scans(page, limit)- Get recent public scans (paginated).
get_recent_threats(hours, limit)- Get recent malware threats.
get_recent_yara_threats(hours, limit)- Get recent YARA threats.
get_safe_browsing(scan_id)- Get safe browsing threats for a scan_id. Required: scan_id.
get_safe_browsing_stats- Get safe browsing stats.
get_scan_ioc(scan_id)- Get IOC matches for a scan_id. Required: scan_id.
get_scan_progress(scan_id)- Get scan progress by scan_id. Required: scan_id.
get_scan_reports(scan_id, report_type)- Get available reports for a scan_id. Required: scan_id.
get_scan_result(scan_id)- Get full scan result by scan_id. Required: scan_id.
get_scan_summary(scan_id)- Get compact scan summary by scan_id. Required: scan_id.
get_screenshot_stats- Get screenshot statistics.
get_technologies_by_scan(scan_id)- Get detected technologies for a scan_id. Required: scan_id.
get_technology_combinations(page, limit, tech_name, min_occurrences)- Get technology combinations (paginated). Required: tech_name.
get_technology_stats- Get technology stats.
get_tls_asn1(scan_id)- Get TLS certificate ASN.1 data for a scan_id. Required: scan_id.
get_tls_details(scan_id)- Get TLS details for a scan_id. Required: scan_id.
get_top_tracking_keys(limit, tracker_type)- Get top tracking keys.
get_yara_by_scan(scan_id)- Get YARA results for a scan_id. Required: scan_id.
get_yara_matches(scan_id)- Get YARA matches for a scan_id. Required: scan_id.
get_yara_stats- Get YARA stats.
run_js_differential_analysis(scan_id, min_confidence, include_known_libraries)- Run JS differential analysis for a scan_id. Required: scan_id.
search_ai_classification(limit, classification)- Search AI scans by classification. Required: classification.
search_ai_high_risk(limit, min_confidence, min_risk_score)- Search AI high-risk scans.
search_ai_scam_type(limit, scam_type)- Search AI scans by scam type. Required: scam_type.
search_analyzer_high_risk(page, limit, min_risk_score)- Search analyzer high-risk scans (paginated).
search_by_asn(page, limit, asn_number)- Search scans by ASN (paginated). Required: asn_number.
search_by_favicon(page, limit, hash_type, hash_value)- Search scans by favicon hash (paginated). Required: hash_value.
search_by_fuzzy_hash(page, limit, hash_type, hash_value)- Search scans by fuzzy hash (paginated). Required: hash_type, hash_value.
search_by_ip(page, limit, ip_address)- Search scans by IP address (paginated). Required: ip_address.
search_by_jarm(page, limit, jarm_signature)- Search scans by JARM signature (paginated). Required: jarm_signature.
search_by_nameserver(nameserver)- Search scans by nameserver. Required: nameserver.
search_by_registrar(page, limit, registrar_name)- Search scans by registrar (paginated). Required: registrar_name.
search_by_screenshot_hash(page, limit, hash_type, hash_value, similarity_threshold)- Search scans by screenshot hash (paginated). Required: hash_type, hash_value.
search_cpe(page, limit, cpe_pattern)- Search CPEs by pattern (paginated). Required: cpe_pattern.
search_favicon_mmh3(page, limit, mmh3_hash)- Search favicon by mmh3 hash (paginated). Required: mmh3_hash.
search_js_fingerprint_by_bundler(page, per_page, bundler_type, bundle_format, min_confidence, include_libraries)- Search JS fingerprints by bundler type. Required: bundler_type.
search_js_fingerprint_by_cdn(limit, cdn_type, unpinned_only, cdn_cache_status)- Search JS fingerprints by CDN. Required: cdn_type.
search_js_fingerprint_by_fuzzy_hash(limit, fuzzy_hash, min_similarity)- Search JS fingerprints by fuzzy hash. Required: fuzzy_hash.
search_js_fingerprint_by_library(page, version, per_page, library_name, min_confidence, version_pattern, include_cdn_only)- Search JS fingerprints by library name. Required: library_name.
search_js_fingerprint_by_library_version(limit, library, version, group_by_url, include_deprecated)- Search JS fingerprints by library version. Required: library, version.
search_js_fingerprint_by_md5(limit, to_date, from_date, hash_value, include_scans)- Search JS fingerprints by MD5 hash. Required: hash_value.
search_js_fingerprint_by_normalized_hash(limit, to_date, from_date, hash_value, include_scans)- Search JS fingerprints by normalized hash. Required: hash_value.
search_js_fingerprint_by_server(limit, server_type, include_headers)- Search JS fingerprints by server type. Required: server_type.
search_js_fingerprint_by_sha1(limit, to_date, from_date, hash_value, include_scans)- Search JS fingerprints by SHA1 hash. Required: hash_value.
search_js_fingerprint_by_sha256(limit, to_date, from_date, hash_value, include_scans)- Search JS fingerprints by SHA256 hash. Required: hash_value.
search_js_fingerprint_obfuscated(page, per_page, max_score, min_score, classification, min_code_length, exclude_libraries)- Search obfuscated JS fingerprints.
search_js_fingerprint_patterns(limit, has_eval, has_crypto, no_library, cdn_mismatch, high_entropy, has_websocket)- Search JS fingerprints by patterns.
search_js_fingerprinter2_composite_hash(limit, composite_hash)- Search JS Fingerprinter2 by composite hash. Required: composite_hash.
search_js_fingerprinter2_signature(limit, signature)- Search JS Fingerprinter2 by signature. Required: signature.
search_js_fingerprinter2_similar(limit, scan_id, include_self, min_similarity)- Search JS Fingerprinter2 similar scans. Required: scan_id.
search_js_malware_families(limit, min_cluster_size, similarity_threshold)- Search JS malware families.
search_js_obfuscation(limit, has_eval, risk_level, min_risk_score)- Search JS obfuscation signals.
search_js_segments_by_hash(limit, offset, code_hash)- Search JS segments by code hash. Required: code_hash.
search_js_segments_by_normalized_hash(limit, offset, normalized_hash)- Search JS segments by normalized hash. Required: normalized_hash.
search_jsfingerprints_by_bundler(limit, offset, bundler)- Search JS fingerprints by bundler (paginated). Required: bundler.
search_jsfingerprints_by_fuzzy_hash(limit, offset, fuzzy_hash)- Search JS fingerprints by fuzzy hash (paginated). Required: fuzzy_hash.
search_jsfingerprints_by_library(limit, offset, library)- Search JS fingerprints by library (paginated). Required: library.
search_jsfingerprints_by_library_version(limit, offset, library, version)- Search JS fingerprints by library version (paginated). Required: library, version.
search_jsfingerprints_by_md5(limit, offset, hash_value)- Search JS fingerprints by MD5 (paginated). Required: hash_value.
search_jsfingerprints_by_normalized_hash(limit, offset, hash_value)- Search JS fingerprints by normalized hash (paginated). Required: hash_value.
search_jsfingerprints_by_sha1(limit, offset, hash_value)- Search JS fingerprints by SHA1 (paginated). Required: hash_value.
search_jsfingerprints_by_sha256(limit, offset, hash_value)- Search JS fingerprints by SHA256 (paginated). Required: hash_value.
search_ocr(q, page, limit)- Search OCR text (paginated). Required: q.
search_ocr_pattern(page, limit, pattern, case_sensitive)- Search OCR by pattern (paginated). Required: pattern.
search_scans(q, page, limit, search_type)- Search scans (q must be at least 3 characters). Required: q.
search_semantic(page, limit, query, threshold)- Semantic search over scans (paginated). Required: query.
search_similar_scans(page, limit, methods, scan_id)- Search for scans similar to a scan_id (paginated). Required: scan_id.
search_similar_screenshots(limit, hash_type, hash_value, max_distance)- Search for similar screenshots by hash. Required: hash_value.
search_suspicious_clipboard(page, limit, pattern)- Search suspicious clipboard indicators (paginated).
search_technologies(q, page, limit, category)- Search technologies (paginated).
search_tracking_key(key, page, sort, limit, tracker_type)- Search by tracking key (paginated). Required: tracker_type, key.
submit_scan(url, options, scan_type, user_agent)- Submit a URL for scanning. Required: url.
submit_scan_report(scan_id, x_real_ip, user_agent, report_type, skip_captcha, captcha_token, captcha_answer, report_details, x_forwarded_for)- Submit a scan report. Required: scan_id, report_type.
wait_for_scan(scan_id, timeout_s, poll_interval_s)- Poll until a scan reaches a terminal status, returning the final summary. Required: scan_id.
Last successful function declaration observed on . Source: https://mcp.scanmalware.com/mcp. We list what the server declared; we do not call any of these functions.
Endpoint status observed on . Source: https://mcp.scanmalware.com/mcp.
Signals
These are separate measurements of different things. They are deliberately not combined into one score, because a popularity number that mixes website traffic with saves and stars cannot be checked or acted on.
| Signal | Value | What it measures | Window | Observed | Source |
|---|---|---|---|---|---|
| GitHub stars | 0 | Number of GitHub accounts that bookmarked this repository since it was created. It is a bookmark count, not installs, not active users and not quality. | cumulative, all time | GitHub | |
| Last commit | 2026-08-06 | Date of the most recent push to any branch. This is the strongest cheap indicator of whether the project is still maintained. | point in time | GitHub | |
| Open issues | 0 | Open issues plus open pull requests, as GitHub counts them together. A high number can mean an active project or an abandoned one. | as of fetch | GitHub | |
| Latest published version | 0.1.6 | Latest version string the maintainer published to the registry. | as of fetch | Model Context Protocol | |
| Registry record last updated | 2026-01-07 | When the registry record was last updated by its maintainer. | point in time | Model Context Protocol | |
| License | Apache-2.0 | Licence GitHub detected in the repository. Detection can be wrong; the LICENSE file is authoritative. | as of fetch | GitHub | |
| First listed in the MCP Registry | 2026-01-07 | Date this server was first published to the official MCP Registry. Not a usage or quality measure. | point in time | Model Context Protocol | |
| repository status | active | The repository exists on GitHub and is not archived. This says nothing about how recently it was worked on. | as of fetch | GitHub | |
| mcp tools declared | 128 tools | Number of functions the server itself declared when asked to list them. This is what the server offers an agent, not a measure of how well any of them work. | as of probe | mcp.scanmalware.com | |
| mcp endpoint status | ok | The server listed 128 functions when asked. | as of probe | mcp.scanmalware.com |
Where to get it
This record as data
Every field on this page, with its source and observation date, is in the catalog JSON. Fetch the whole kind at once instead of parsing this HTML.
GET /api/v1/entries/mcp_server.json