ScanMalware.com URL Scanner changelog

https://raw.githubusercontent.com/scanmalware/mcp-server/HEAD/AGENTS.md

− This repo contains a Python **Model Context Protocol (MCP)** server that exposes the **ScanMalware.com** API as tools/resources for an MCP client (128 tools on mcp 2.3.0, served at `https://mcp.scanmalware.com/mcp`; operations in `docs/OPERATIONS.md`). The sections below are the original design notes; where they differ from the code, the code and the runbook are current.− - OpenAPI currently lists ~146 paths / ~147 operations; many response schemas are `{}` (treat as untyped JSON and verify with live calls).+ This repo contains a Python **Model Context Protocol (MCP)** server that exposes the **ScanMalware.com** API as tools/resources for an MCP client (145 tools on mcp 2.3.0, served at `https://mcp.scanmalware.com/mcp`; operations in `docs/OPERATIONS.md`). The sections below are the original design notes; where they differ from the code, the code and the runbook are current.+ - OpenAPI lists 242 operations as of November 2026 (it was ~147 when these notes were written); many response schemas are `{}` (treat as untyped JSON and verify with live calls).

• + search_smql
• + get_smql_facets
• + search_smql_domains
• + get_smql_filters
• + count_smql_queries
• + get_scan_pivot_values
• + get_scan_graph
• + get_ct_root_domains_by_ip
• + get_dns_history
• + search_reverse_dns
• + get_scan_dns
• + get_domain_hosts
• + get_scan_deobfuscation
• + get_script_deobfuscation
• + get_script_decoded_source
• + get_script_command_literals
• + get_file_analysis

icon_url

— → https://mcp.scanmalware.com/icon.png

version

0.1.6 → 0.2.2

https://raw.githubusercontent.com/scanmalware/mcp-server/HEAD/AGENTS.md

− This repo will contain a Python **Model Context Protocol (MCP)** server that exposes the **ScanMalware.com** API as tools/resources for an MCP client.− Recommended env vars (never hardcode secrets):− - `SCANMALWARE_BEARER_TOKEN` (optional; only needed for auth endpoints)− - `SCANMALWARE_BASIC_USER` / `SCANMALWARE_BASIC_PASSWORD` (optional; only needed for `/modules/*`)− - `submit_scan(url, scan_type="public", options=None, user_agent=None)`− - `get_screenshot(scan_id)` (resource; wraps `GET /api/v1/screenshot/{scan_id}`)− - `download_certificate(scan_id)` (resource; wraps `GET /api/v1/tls/{scan_id}/certificate/download`)−   - Includes `mcp.server.fastmcp` for ergonomic tool/resource definitions while staying “official”.− Recommendation: use `mcp.server.fastmcp.FastMCP` for a curated tool set, and run it in Docker via an HTTP-capable transport (or stdio for local use).+ This repo contains a Python **Model Context Protocol (MCP)** server that exposes the **ScanMalware.com** API as tools/resources for an MCP client (128 tools on mcp 2.3.0, served at `https://mcp.scanmalware.com/mcp`; operations in `docs/OPERATIONS.md`). The sections below are the original design notes; where they differ from the code, the code and the runbook are current.+ The server deliberately exposes none of these auth-gated or `/modules/*`+ endpoints, so it needs no Basic credentials.+ Env vars (never hardcode secrets; full list in `docs/OPERATIONS.md`):+ - `SCANMALWARE_BEARER_TOKEN` (optional; needed for `private` scans)+ - `submit_scan(url, scan_type, options=None, user_agent=None)` (`scan_type` is required: a defaulted `"public"` published targets nobody chose to publish)+ - `get_screenshot(scan_id)` (resource; wraps `GET /api/v1/screenshot/{scan_id}`). Built as the resource `scanmalware://screenshot/{scan_id}.png`.+ - `download_certificate(scan_id)` (resource; wraps `GET /api/v1/tls/{scan_id}/certificate/download`). Built as the resource `scanmalware://certificate/{scan_id}.pem`.+   - Includes `mcp.server.mcpserver.MCPServer` (named `FastMCP` in `mcp.server.fastmcp` before 2.0) for ergonomic tool/resource definitions while staying “official”.+ Recommendation: use `mcp.server.mcpserver.MCPServer` (mcp 2.x; this server runs 2.3.0) for a curated tool set, and run it in Docker via an HTTP-capable transport (or stdio for local use).

• + get_js_runtime_behaviour
• + get_js_runtime_stats
• + get_js_runtime_health
• + get_js_runtime_coverage
• + search_js_runtime_by_composite_hash
• + search_js_runtime_by_signature
• + search_js_runtime_similar
• − get_js_fingerprinter2
• − get_js_fingerprinter2_stats
• − get_js_fingerprinter2_health
• − get_js_fingerprinter2_coverage
• − search_js_fingerprinter2_composite_hash
• − search_js_fingerprinter2_signature
• − search_js_fingerprinter2_similar