Scry is answering right now. Last checked 1 min ago. It exposes 12 tools. Last commit 25 May 2026.
Free IPv4 lookups against a distributed attacker-observation corpus.
The author archived this repository on GitHub, meaning it is no longer maintained.
Uptime history
91 days of history · worst day 0%
91 days agonow
100.0%
Uptime 24h
92 of 92 checks
12
Tools
read from the server
229 ms
Response time
average over 24h
0
Stars
last commit 25 May 2026
Scry does not always answer
Over the last week it answered 83.3% of our checks. We check every 15 minutes, so you hear about the next outage within the hour — not from your users.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 1 min ago.
run in your terminal
claude mcp add scry --transport http https://mcp.tunnelmind.ai/mcpSettings → Connectors → Add custom connector, then paste this address
https://mcp.tunnelmind.ai/mcp~/.codex/config.toml
[mcp_servers.scry]
url = "https://mcp.tunnelmind.ai/mcp".cursor/mcp.json
{
"mcpServers": {
"scry": {
"url": "https://mcp.tunnelmind.ai/mcp"
}
}
}.vscode/mcp.json
{
"servers": {
"scry": {
"type": "http",
"url": "https://mcp.tunnelmind.ai/mcp"
}
}
}Available tools 12
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
scry
scry_asn
Roll-up of corpus activity for a single ASN — observation count, distinct source IPs, actor count, scanner count, high-confidence actor count, and per-protocol breakdown.
scry_campaign
Single campaign detail by id (format: c[0-9a-f]{15}).
scry_campaigns
Active threat campaigns — coordinated attacker activity that exceeds the noise floor. ≥5 distinct actors, ≥3 ASNs, ≤5 destination ports, ≥1h history.
scry_check
Returns Scry's corpus knowledge for a single IPv4 address: when it was first/last
observed, observation count, protocols and ports targeted, ASN, country, category
(actor/scanner/not_observed), and confidence_bucket (low/medium/high).
Use when an agent needs IP triage, hostility assessment, or risk signaling.
Do NOT use for raw payloads (never exposed) or IPv6 (corpus is v4-only at v0.1).
scry_check_bulk
Look up many IPv4 addresses in one request. Up to 100 IPs per call. Same per-IP shape as scry_check, keyed by IP.
scry_country
Roll-up of corpus activity by ISO country code. Same shape as scry_asn.
scry_recent
Recent observations feed — aggregated by source IP within a time window. Cursor-paginated via since_ms.
scry_stats
Returns aggregate Scry corpus telemetry: total observation count, distinct
source IPs, first/last observation timestamps, last-24h activity, and
per-protocol breakdowns. Useful as a liveness/density check before issuing
per-IP queries — lets an agent decide whether the corpus has enough data
to be authoritative.
Use this tool when:
- An agent is planning a multi-step investigation and wants to know if Scry
has corpus density worth querying.
- You want a 'corpus health' signal in a dashboard or report.
Do NOT use this tool when:
- You want details about a specific IP — use `scry_check`.
- You want sensor fleet size or node identities — never exposed at any tier.
Inputs: none.
Returns: total_observations, distinct_source_ips, first_seen_ms, last_seen_ms, observations_last_24h, distinct_source_ips_last_24h, by_protocol, as_of_ms.
Cost: free, anonymous, rate-limited.
Latency: <100ms typical.
scry_timeseries
Bucketed observation counts over time. Detect bursts, plot trends, sanity-check whether attacker activity is rising or falling.
scry_tool
Single tool detail by 16-char hex id from scry_tools.
scry_tools
List detected attack tools — (protocol, payload, path) tuples sent by 3+ distinct source IPs. Aggregate metadata only; never lists member actors.
scry_top
Top-N source dimensions over a time window. Useful for situational awareness — 'where is the noise coming from right now?'
Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://mcp.tunnelmind.ai/mcp | streamable-http | answering | 248 ms | 1 min ago |
Alternatives to Scry
same job, measured the same wayIso Codes
by pipeworx-io
iso-codes MCP — lookups against the Debian iso-codes project JSON.
Agent Lead Generation
by sadri-dridi
Leads from agents: hops attributed with a per-hop utm_id from discovery to trial to invoice.
MintwareDevelopers
by mintwaredevelopers
Look up on-chain Attribution reputation scores for wallets and AI agents on Base.
Fred MCP
by mrfentmen
MCP server for FRED economic data: series, observations. Needs a free API key.
Homebutler
by higangssh
Tells an agent what changed on a server since it last looked - status, Docker, backups, Proxmox.
Mrr Floor Check
by dailyaiagents-cpu
Daily Stripe MRR query against a configured floor
ScopeAI GEO Observation
by scopeai
GEO brand visibility and AI citation evidence. Free capability discovery and request matching.
Insightiq
by ravi-p-k-1
Look up real FRED (Federal Reserve Economic Data) series and historical observations.
Scry — questions
Answers built from our own checks of this server.
What can Scry do?
It exposes 12 tools, read directly from the server on our last check. Among them: scry_asn, scry_campaign, scry_campaigns, scry_check, scry_check_bulk, scry_country and 6 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README.
How MCP servers expose tools in the first place →
Is Scry working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 229 ms. The bar chart above shows every period we have measured.
Is Scry still maintained?
The author archived this repository on GitHub, meaning it is no longer maintained. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.
How do I connect Scry?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Scry need an API key?
No. Scry completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 12 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is Scry?
It answers our handshake in 229 ms on average, which is faster than 59% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is Scry open source?
We cannot say either way: written in JavaScript and 0 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.