mcpbeat

ScanMalware.com URL Scanner MCP Server

com.scanmalware.mcp/scanmalware-mcp
answering

ScanMalware.com URL Scanner is answering right now. Last checked moments ago. It exposes 128 tools. Last commit 7 Jan 2026.

MCP server for ScanMalware.com URL scanning, malware detection, and analysis.

Uptime history 39 hours of history
39 hours agonow
100.0%
Uptime 24h
92 of 92 checks
128
Tools
read from the server
185 ms
Response time
average over 24h
0
Stars
last commit 7 Jan 2026

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 0 min ago.

run in your terminal
claude mcp add scanmalware-mcp --transport http https://mcp.scanmalware.com/mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "scanmalware-mcp": {
      "url": "https://mcp.scanmalware.com/mcp"
    }
  }
}
~/.codex/config.toml
[mcp_servers.scanmalware-mcp]
url = "https://mcp.scanmalware.com/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "scanmalware-mcp": {
      "url": "https://mcp.scanmalware.com/mcp"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "scanmalware-mcp": {
      "url": "https://mcp.scanmalware.com/mcp"
    }
  }
}

Available tools 128

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

fingerprint
find_js_fingerprint_similar_by_hash
Find similar JS fingerprints by hash.
search_js_fingerprint_by_bundler
Search JS fingerprints by bundler type.
search_js_fingerprint_by_cdn
Search JS fingerprints by CDN.
search_js_fingerprint_by_fuzzy_hash
Search JS fingerprints by fuzzy hash.
search_js_fingerprint_by_library
Search JS fingerprints by library name.
search_js_fingerprint_by_library_version
Search JS fingerprints by library version.
search_js_fingerprint_by_md5
Search JS fingerprints by MD5 hash.
search_js_fingerprint_by_normalized_hash
Search JS fingerprints by normalized hash.
search_js_fingerprint_by_server
Search JS fingerprints by server type.
search_js_fingerprint_by_sha1
Search JS fingerprints by SHA1 hash.
search_js_fingerprint_by_sha256
Search JS fingerprints by SHA256 hash.
search_js_fingerprint_obfuscated
Search obfuscated JS fingerprints.
search_js_fingerprint_patterns
Search JS fingerprints by patterns.
jsfingerprints
search_jsfingerprints_by_bundler
Search JS fingerprints by bundler (paginated).
search_jsfingerprints_by_fuzzy_hash
Search JS fingerprints by fuzzy hash (paginated).
search_jsfingerprints_by_library
Search JS fingerprints by library (paginated).
search_jsfingerprints_by_library_version
Search JS fingerprints by library version (paginated).
search_jsfingerprints_by_md5
Search JS fingerprints by MD5 (paginated).
search_jsfingerprints_by_normalized_hash
Search JS fingerprints by normalized hash (paginated).
search_jsfingerprints_by_sha1
Search JS fingerprints by SHA1 (paginated).
search_jsfingerprints_by_sha256
Search JS fingerprints by SHA256 (paginated).
fingerprinter2
get_js_fingerprinter2
Get JS Fingerprinter2 results for a scan_id.
get_js_fingerprinter2_coverage
Get JS Fingerprinter2 fingerprint coverage.
get_js_fingerprinter2_health
Get JS Fingerprinter2 health check.
get_js_fingerprinter2_stats
Get JS Fingerprinter2 stats.
search_js_fingerprinter2_composite_hash
Search JS Fingerprinter2 by composite hash.
search_js_fingerprinter2_signature
Search JS Fingerprinter2 by signature.
search_js_fingerprinter2_similar
Search JS Fingerprinter2 similar scans.
jsfingerprint
get_jsfingerprint
Get JS fingerprint by ID.
get_jsfingerprint_bundle_stats
Get JS fingerprint bundle statistics.
get_jsfingerprint_hash_prevalence
Get JS fingerprint hash prevalence for a scan_id.
get_jsfingerprint_library_stats
Get JS fingerprint library statistics.
get_jsfingerprint_similar
Find similar JS fingerprints.
get_jsfingerprint_similarity_counts
Get JS fingerprint similarity counts.
get_jsfingerprint_source
Get JS fingerprint source.
scan
get_scan_ioc
Get IOC matches for a scan_id.
get_scan_progress
Get scan progress by scan_id.
get_scan_reports
Get available reports for a scan_id.
get_scan_result
Get full scan result by scan_id.
get_scan_summary
Get compact scan summary by scan_id.
segments
get_js_segments_by_scan
Get JS segments for a scan_id.
get_js_segments_suspicious
Get suspicious JS segments for a scan_id.
get_js_segments_unknown
Get unknown JS segments for a scan_id.
search_js_segments_by_hash
Search JS segments by code hash.
search_js_segments_by_normalized_hash
Search JS segments by normalized hash.
favicon
get_favicon
Get favicon metadata for a scan_id.
get_favicon_stats
Get favicon statistics.
search_by_favicon
Search scans by favicon hash (paginated).
search_favicon_mmh3
Search favicon by mmh3 hash (paginated).
ocr
get_ocr_by_scan
Get OCR data for a scan_id.
get_ocr_stats
Get OCR stats.
search_ocr
Search OCR text (paginated).
search_ocr_pattern
Search OCR by pattern (paginated).
analyzer
get_analyzer_results
Get analyzer results for a scan_id.
get_analyzer_stats
Get analyzer statistics overview.
search_analyzer_high_risk
Search analyzer high-risk scans (paginated).
cpe
get_cpe_by_scan
Get CPEs for a scan_id.
get_cpe_stats
Get CPE statistics.
search_cpe
Search CPEs by pattern (paginated).
domain
get_domain_history
Get historical scans for a domain (paginated).
get_domain_scans
Get recent scans for a domain.
get_domain_stats
Get summary statistics for a domain.
jarm
get_jarm_signatures
Get JARM signatures for a scan_id.
get_jarm_stats
Get JARM statistics.
search_by_jarm
Search scans by JARM signature (paginated).
malware
get_malware_by_scan
Get malware details for a scan_id.
get_malware_stats
Get malware stats.
search_js_malware_families
Search JS malware families.
recent
get_recent_scans
Get recent public scans (paginated).
get_recent_threats
Get recent malware threats.
get_recent_yara_threats
Get recent YARA threats.
similar
get_ct_similar_domains
Find similar CT domains for a domain.
search_similar_scans
Search for scans similar to a scan_id (paginated).
search_similar_screenshots
Search for similar screenshots by hash.
yara
get_yara_by_scan
Get YARA results for a scan_id.
get_yara_matches
Get YARA matches for a scan_id.
get_yara_stats
Get YARA stats.
clipboard
get_clipboard_events
Get clipboard events for a scan_id.
get_clipboard_stats
Get clipboard statistics.
safe
get_safe_browsing
Get safe browsing threats for a scan_id.
get_safe_browsing_stats
Get safe browsing stats.
screenshot
get_screenshot_stats
Get screenshot statistics.
search_by_screenshot_hash
Search scans by screenshot hash (paginated).
submit
submit_scan
Submit a URL for scanning.
submit_scan_report
Submit a scan report.
technologies
get_technologies_by_scan
Get detected technologies for a scan_id.
search_technologies
Search technologies (paginated).
technology
get_technology_combinations
Get technology combinations (paginated).
get_technology_stats
Get technology stats.
tls
get_tls_asn1
Get TLS certificate ASN.1 data for a scan_id.
get_tls_details
Get TLS details for a scan_id.
analysis
get_ai_analysis
Get AI analysis for a scan_id (if available).
api
get_api_root
Get API root metadata.
asn
search_by_asn
Search scans by ASN (paginated).
bot
get_bot_protection
Get bot-protection detection for a scan_id.
capabilities
get_capabilities_by_date
Get capability stats by date.
certificates
get_ct_certificates
Get certificate transparency data for a domain.
classification
search_ai_classification
Search AI scans by classification.
differential
run_js_differential_analysis
Run JS differential analysis for a scan_id.
dns
get_ct_dns_records
Get CT DNS records for a domain.
domains
get_ct_domains_by_ip
Find CT domains on an IP address.
fingerprints
get_js_fingerprints
Get JavaScript fingerprints for a scan_id.
fuzzy
search_by_fuzzy_hash
Search scans by fuzzy hash (paginated).
health
get_health
Get API health status.
high
search_ai_high_risk
Search AI high-risk scans.
ids
get_ids_alerts
Get IDS alerts for a scan_id.
latest
get_latest_capabilities
Get latest capability stats.
library
get_js_library_inventory
Get JS fingerprint library inventory.
nameserver
search_by_nameserver
Search scans by nameserver.
netlog
get_netlog
Get network log for a scan_id.
obfuscation
search_js_obfuscation
Search JS obfuscation signals.
open
get_open_graph
Get Open Graph data for a scan_id.
pastejacking
get_pastejacking
Get pastejacking findings for a scan_id.
pcap
get_pcap_metadata
Get PCAP metadata for a scan_id.
platform
get_platform_stats
Get platform statistics.
popular
get_popular_technologies
Get popular technologies (paginated).
rdap
get_rdap
Get RDAP details for a scan_id.
registrar
search_by_registrar
Search scans by registrar (paginated).
scam
search_ai_scam_type
Search AI scans by scam type.
scans
search_scans
Search scans (q must be at least 3 characters).
search
search_by_ip
Search scans by IP address (paginated).
semantic
search_semantic
Semantic search over scans (paginated).
stats
get_ip_stats
Get IP statistics (paginated).
suspicious
search_suspicious_clipboard
Search suspicious clipboard indicators (paginated).
timeline
get_ct_timeline
Get CT certificate timeline for a domain.
top
get_top_tracking_keys
Get top tracking keys.
tracking
search_tracking_key
Search by tracking key (paginated).
wait
wait_for_scan
Poll until a scan reaches a terminal status, returning the final summary.

Endpoints

URLTransportStateLatencyChecked
https://mcp.scanmalware.com/mcp streamable-http answering 204 ms 0 min ago

ScanMalware.com URL Scanner — questions

Answers built from our own checks of this server.

What can ScanMalware.com URL Scanner do?
It exposes 128 tools, read directly from the server on our last check. Among them: find_js_fingerprint_similar_by_hash, get_ai_analysis, get_analyzer_results, get_analyzer_stats, get_api_root, get_bot_protection and 122 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
What is ScanMalware.com URL Scanner mostly used for?
Its tools cluster around fingerprint, jsfingerprints and jsfingerprint. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.
Is ScanMalware.com URL Scanner working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 185 ms. The bar chart above shows every period we have measured.
How do I connect ScanMalware.com URL Scanner?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does ScanMalware.com URL Scanner need an API key?
No. ScanMalware.com URL Scanner completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 128 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is ScanMalware.com URL Scanner?
It answers our handshake in 185 ms on average, which is faster than 66% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is ScanMalware.com URL Scanner open source?
Yes — written in Python and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.