Index / MCP servers / ScanMalware.com URL Scanner

ScanMalware.com URL Scanner MCP server

ScanMalware.com URL Scanner is a remote MCP server that gives an AI agent 128 tools, among them find_js_fingerprint_similar_by_hash, get_ai_analysis, get_analyzer_results. It answers at https://mcp.scanmalware.com/mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 6 of 6 times since 10 September 2026; the last check, on 19 October 2026, succeeded.

Status
Answering
Tools
128
Official
yes, served from scanmalware.com
Reliability
6 of 6 checks
Response time
99 ms
Transport
streamable HTTP
Last checked
19 October 2026

MCP server for ScanMalware.com URL scanning, malware detection, and analysis.

Description as the publisher wrote it.

The 128 tools ScanMalware.com URL Scanner offers

ToolWhat it does
find_js_fingerprint_similar_by_hashFind similar JS fingerprints by hash.
Inputs: content_sha256, threshold, limit, exclude_exact_matches
get_ai_analysisGet AI analysis for a scan_id (if available).
Inputs: scan_id
get_analyzer_resultsGet analyzer results for a scan_id.
Inputs: scan_id
get_analyzer_statsGet analyzer statistics overview.
get_api_rootGet API root metadata.
get_bot_protectionGet bot-protection detection for a scan_id.
Inputs: scan_id
get_capabilities_by_dateGet capability stats by date.
Inputs: scan_date
get_clipboard_eventsGet clipboard events for a scan_id.
Inputs: scan_id
get_clipboard_statsGet clipboard statistics.
get_cpe_by_scanGet CPEs for a scan_id.
Inputs: scan_id
get_cpe_statsGet CPE statistics.
get_ct_certificatesGet certificate transparency data for a domain.
Inputs: domain
get_ct_dns_recordsGet CT DNS records for a domain.
Inputs: domain
get_ct_domains_by_ipFind CT domains on an IP address.
Inputs: ip_address
get_ct_similar_domainsFind similar CT domains for a domain.
Inputs: domain
get_ct_timelineGet CT certificate timeline for a domain.
Inputs: domain
get_domain_historyGet historical scans for a domain (paginated).
Inputs: domain, page, limit
get_domain_scansGet recent scans for a domain.
Inputs: domain, limit, status
get_domain_statsGet summary statistics for a domain.
Inputs: domain
get_faviconGet the favicon for a scan_id: size, hashes, and the image itself base64-encoded. Use the md5 with search_by_favicon to pivot.
Inputs: scan_id
get_favicon_statsGet favicon statistics.
get_healthGet API health status.
get_ids_alertsGet IDS alerts for a scan_id.
Inputs: scan_id
get_ip_statsGet IP statistics (paginated).
Inputs: ip_address, page, limit
get_jarm_signaturesGet JARM signatures for a scan_id.
Inputs: scan_id
get_jarm_statsGet JARM statistics.
get_js_fingerprinter2Get JS Fingerprinter2 results for a scan_id.
Inputs: scan_id, include_detailed_events
get_js_fingerprinter2_coverageGet JS Fingerprinter2 fingerprint coverage.
get_js_fingerprinter2_healthGet JS Fingerprinter2 health check.
get_js_fingerprinter2_statsGet JS Fingerprinter2 stats.
get_js_fingerprintsGet JavaScript fingerprints for a scan_id.
Inputs: scan_id, include_functions, include_http_headers, include_vectors_info
get_js_library_inventoryGet JS fingerprint library inventory.
Inputs: library, min_count
get_js_segments_by_scanGet JS segments for a scan_id.
Inputs: scan_id, script_url, limit, offset
get_js_segments_suspiciousGet suspicious JS segments for a scan_id.
Inputs: scan_id, min_risk_score, limit, offset
get_js_segments_unknownGet unknown JS segments for a scan_id.
Inputs: scan_id, min_code_length, limit, offset
get_jsfingerprintGet JS fingerprint by ID.
Inputs: fingerprint_id, include_functions, include_http_headers
get_jsfingerprint_bundle_statsGet JS fingerprint bundle statistics.
Inputs: from_date, to_date
get_jsfingerprint_hash_prevalenceGet JS fingerprint hash prevalence for a scan_id.
Inputs: scan_id
get_jsfingerprint_library_statsGet JS fingerprint library statistics.
Inputs: from_date, to_date, min_count
get_jsfingerprint_similarFind similar JS fingerprints.
Inputs: fingerprint_id, threshold, limit, offset, exclude_same_scan
88 more tools

get_jsfingerprint_similarity_counts, get_jsfingerprint_source, get_latest_capabilities, get_malware_by_scan, get_malware_stats, get_netlog, get_ocr_by_scan, get_ocr_stats, get_open_graph, get_pastejacking, get_pcap_metadata, get_platform_stats, get_popular_technologies, get_rdap, get_recent_scans, get_recent_threats, get_recent_yara_threats, get_safe_browsing, get_safe_browsing_stats, get_scan_ioc, get_scan_progress, get_scan_reports, get_scan_result, get_scan_summary, get_screenshot_stats, get_technologies_by_scan, get_technology_combinations, get_technology_stats, get_tls_asn1, get_tls_details, get_top_tracking_keys, get_yara_by_scan, get_yara_matches, get_yara_stats, run_js_differential_analysis, search_ai_classification, search_ai_high_risk, search_ai_scam_type, search_analyzer_high_risk, search_by_asn, search_by_favicon, search_by_fuzzy_hash, search_by_ip, search_by_jarm, search_by_nameserver, search_by_registrar, search_by_screenshot_hash, search_cpe, search_favicon_mmh3, search_js_fingerprint_by_bundler, search_js_fingerprint_by_cdn, search_js_fingerprint_by_fuzzy_hash, search_js_fingerprint_by_library, search_js_fingerprint_by_library_version, search_js_fingerprint_by_md5, search_js_fingerprint_by_normalized_hash, search_js_fingerprint_by_server, search_js_fingerprint_by_sha1, search_js_fingerprint_by_sha256, search_js_fingerprint_obfuscated, search_js_fingerprint_patterns, search_js_fingerprinter2_composite_hash, search_js_fingerprinter2_signature, search_js_fingerprinter2_similar, search_js_malware_families, search_js_obfuscation, search_js_segments_by_hash, search_js_segments_by_normalized_hash, search_jsfingerprints_by_bundler, search_jsfingerprints_by_fuzzy_hash, search_jsfingerprints_by_library, search_jsfingerprints_by_library_version, search_jsfingerprints_by_md5, search_jsfingerprints_by_normalized_hash, search_jsfingerprints_by_sha1, search_jsfingerprints_by_sha256, search_ocr, search_ocr_pattern, search_scans, search_semantic, search_similar_scans, search_similar_screenshots, search_suspicious_clipboard, search_technologies, search_tracking_key, submit_scan, submit_scan_report, wait_for_scan

Add ScanMalware.com URL Scanner to your AI client

Every block below points at https://mcp.scanmalware.com/mcp. Pick your client and copy.

Claude Code: one command in your terminal
claude mcp add --transport http scanmalware-com-url-scanner https://mcp.scanmalware.com/mcp
Claude Desktop: claude_desktop_config.json
{
  "mcpServers": {
    "scanmalware-com-url-scanner": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://mcp.scanmalware.com/mcp"]
    }
  }
}
Cursor: ~/.cursor/mcp.json, or .cursor/mcp.json in a project
{
  "mcpServers": {
    "scanmalware-com-url-scanner": {
      "url": "https://mcp.scanmalware.com/mcp"
    }
  }
}
VS Code and GitHub Copilot: .vscode/mcp.json
{
  "servers": {
    "scanmalware-com-url-scanner": {
      "type": "http",
      "url": "https://mcp.scanmalware.com/mcp"
    }
  }
}
Zed: Zed settings.json
{
  "context_servers": {
    "scanmalware-com-url-scanner": {
      "url": "https://mcp.scanmalware.com/mcp"
    }
  }
}
Windsurf: ~/.codeium/mcp_config.json
{
  "mcpServers": {
    "scanmalware-com-url-scanner": {
      "serverUrl": "https://mcp.scanmalware.com/mcp"
    }
  }
}
JetBrains AI Assistant: Settings, Tools, AI Assistant, MCP, New MCP Server, as JSON
{
  "mcpServers": {
    "scanmalware-com-url-scanner": {
      "url": "https://mcp.scanmalware.com/mcp"
    }
  }
}
Continue: .continue/mcpServers/neuronto.yaml
name: ScanMalware.com URL Scanner
version: 0.0.1
schema: v1
mcpServers:
  - name: ScanMalware.com URL Scanner
    type: streamable-http
    url: https://mcp.scanmalware.com/mcp
Gemini CLI: ~/.gemini/settings.json
{
  "mcpServers": {
    "scanmalware-com-url-scanner": {
      "httpUrl": "https://mcp.scanmalware.com/mcp"
    }
  }
}
Codex CLI: MCP server config
{
  "mcpServers": {
    "scanmalware-com-url-scanner": {
      "type": "http",
      "url": "https://mcp.scanmalware.com/mcp"
    }
  }
}
Warp: MCP servers, + Add, paste JSON
{
  "mcpServers": {
    "scanmalware-com-url-scanner": {
      "url": "https://mcp.scanmalware.com/mcp"
    }
  }
}
Goose: a one-click extension link
goose://extension?url=https%3A%2F%2Fmcp.scanmalware.com%2Fmcp&type=streamable_http&id=scanmalware-com-url-scanner&name=ScanMalware.com%20URL%20Scanner

Is ScanMalware.com URL Scanner up right now?

It answered our last check on 19 October 2026 in 99 ms. Over 6 checks since 10 September 2026 it answered 6. Status here comes from Neuronto's own probes, not from the publisher.

MCP servers similar to ScanMalware.com URL Scanner

Questions about ScanMalware.com URL Scanner

Is there an official ScanMalware.com URL Scanner MCP server?

Yes. It is published by scanmalware.com and served from mcp.scanmalware.com, the vendor's own domain: https://mcp.scanmalware.com/mcp.

How many tools does ScanMalware.com URL Scanner have?

128, as returned by the server's own tools/list on 11 September 2026: find_js_fingerprint_similar_by_hash, get_ai_analysis, get_analyzer_results, get_analyzer_stats, get_api_root, get_bot_protection, get_capabilities_by_date, get_clipboard_events, and 120 more.

Is ScanMalware.com URL Scanner down?

It answered our last check on 19 October 2026 in 99 ms. Over 6 checks since 10 September 2026 it answered 6.

How do I add ScanMalware.com URL Scanner to Cursor?

Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://mcp.scanmalware.com/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.

Does ScanMalware.com URL Scanner need an API key?

It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.

Where this comes from

Publisher: com.scanmalware.mcp. Endpoint host: mcp.scanmalware.com. ARD identifier: urn:air:com.scanmalware.mcp:mcp:scanmalware-mcp. First indexed 10 September 2026. The tools are exactly what the server returned; nothing on this page is inferred from its name. Ranking in Neuronto search is never for sale.

Is this your server? Get a message the day it stops answering or its tools change: monitoring, 14 days free. Or claim the domain to manage how it is listed.