ScanMalware.com URL Scanner MCP Tools

ScanMalware.com URL Scanner exposes 128 tools. Each one has its own page with the configuration for every client that can run this server.

get_recent_scans Read-only

get recent scans
submit_scan

submit scan
get_scan_summary Read-only

get scan summary
wait_for_scan

wait for scan
get_scan_result Read-only

get scan result
search_scans Read-only

search scans
get_ai_analysis Read-only

get ai analysis
get_scan_progress Read-only

get scan progress
get_scan_ioc Read-only

get scan ioc
get_tls_details Read-only

get tls details
get_tls_asn1 Read-only

get tls asn1
get_technologies_by_scan Read-only

get technologies by scan
get_bot_protection Read-only

get bot protection
get_yara_matches Read-only

get yara matches
get_jarm_signatures Read-only

get jarm signatures
get_analyzer_results Read-only

get analyzer results
get_clipboard_events Read-only

get clipboard events
get_js_fingerprints Read-only

get js fingerprints
get_scan_reports Read-only

get scan reports
get_domain_scans Read-only

get domain scans
get_domain_history Read-only

get domain history
get_domain_stats Read-only

get domain stats
search_by_ip Read-only

search by ip
get_ip_stats Read-only

get ip stats
search_by_asn Read-only

search by asn
search_similar_scans Read-only

search similar scans
search_semantic Read-only

search semantic
search_by_favicon Read-only

search by favicon
search_ai_high_risk Read-only

search ai high risk
search_ai_scam_type Read-only

search ai scam type
search_ai_classification Read-only

search ai classification
get_analyzer_stats Read-only

get analyzer stats
search_analyzer_high_risk Read-only

search analyzer high risk
get_favicon Read-only

get favicon
get_favicon_stats Read-only

get favicon stats
get_screenshot_stats Read-only

get screenshot stats
search_similar_screenshots Read-only

search similar screenshots
search_ocr Read-only

search ocr
search_ocr_pattern Read-only

search ocr pattern
search_by_jarm Read-only

search by jarm
search_by_fuzzy_hash Read-only

search by fuzzy hash
search_by_screenshot_hash Read-only

search by screenshot hash
search_suspicious_clipboard Read-only

search suspicious clipboard
get_recent_threats Read-only

get recent threats
get_recent_yara_threats Read-only

get recent yara threats
get_ct_certificates Read-only

get ct certificates
get_ct_dns_records Read-only

get ct dns records
get_ct_domains_by_ip Read-only

get ct domains by ip
get_ct_similar_domains Read-only

get ct similar domains
get_ct_timeline Read-only

get ct timeline
get_api_root Read-only

get api root
get_health Read-only

get health
get_platform_stats Read-only

get platform stats
get_latest_capabilities Read-only

get latest capabilities
get_capabilities_by_date Read-only

get capabilities by date
get_clipboard_stats Read-only

get clipboard stats
get_cpe_stats Read-only

get cpe stats
get_cpe_by_scan Read-only

get cpe by scan
search_cpe Read-only

search cpe
get_ids_alerts Read-only

get ids alerts
get_jarm_stats Read-only

get jarm stats
get_malware_stats Read-only

get malware stats
get_malware_by_scan Read-only

get malware by scan
get_yara_stats Read-only

get yara stats
get_yara_by_scan Read-only

get yara by scan
get_safe_browsing_stats Read-only

get safe browsing stats
get_safe_browsing Read-only

get safe browsing
get_top_tracking_keys Read-only

get top tracking keys
search_tracking_key Read-only

search tracking key
search_technologies Read-only

search technologies
get_technology_combinations Read-only

get technology combinations
get_popular_technologies Read-only

get popular technologies
get_technology_stats Read-only

get technology stats
search_by_nameserver Read-only

search by nameserver
get_rdap Read-only

get rdap
search_by_registrar Read-only

search by registrar
submit_scan_report

submit scan report
get_ocr_stats Read-only

get ocr stats
get_ocr_by_scan Read-only

get ocr by scan
get_open_graph Read-only

get open graph
get_pastejacking Read-only

get pastejacking
get_netlog Read-only

get netlog
get_pcap_metadata Read-only

get pcap metadata
search_favicon_mmh3 Read-only

search favicon mmh3
get_js_fingerprinter2 Read-only

get js fingerprinter2
get_js_fingerprinter2_stats Read-only

get js fingerprinter2 stats
get_js_fingerprinter2_health Read-only

get js fingerprinter2 health
get_js_fingerprinter2_coverage Read-only

get js fingerprinter2 coverage
search_js_obfuscation Read-only

search js obfuscation
search_js_malware_families Read-only

search js malware families
search_js_fingerprinter2_composite_hash Read-only

search js fingerprinter2 composite hash
search_js_fingerprinter2_signature Read-only

search js fingerprinter2 signature
search_js_fingerprinter2_similar Read-only

search js fingerprinter2 similar
get_js_segments_by_scan Read-only

get js segments by scan
search_js_segments_by_hash Read-only

search js segments by hash
search_js_segments_by_normalized_hash Read-only

search js segments by normalized hash
get_js_segments_suspicious Read-only

get js segments suspicious
get_js_segments_unknown Read-only

get js segments unknown
run_js_differential_analysis Mutating

run js differential analysis
get_js_library_inventory Read-only

get js library inventory
search_js_fingerprint_patterns Read-only

search js fingerprint patterns
search_js_fingerprint_obfuscated Read-only

search js fingerprint obfuscated
search_js_fingerprint_by_server Read-only

search js fingerprint by server
search_js_fingerprint_by_bundler Read-only

search js fingerprint by bundler
search_js_fingerprint_by_cdn Read-only

search js fingerprint by cdn
search_js_fingerprint_by_library Read-only

search js fingerprint by library
search_js_fingerprint_by_library_version Read-only

search js fingerprint by library version
search_js_fingerprint_by_fuzzy_hash Read-only

search js fingerprint by fuzzy hash
search_js_fingerprint_by_md5 Read-only

search js fingerprint by md5
search_js_fingerprint_by_normalized_hash Read-only

search js fingerprint by normalized hash
search_js_fingerprint_by_sha1 Read-only

search js fingerprint by sha1
search_js_fingerprint_by_sha256 Read-only

search js fingerprint by sha256
find_js_fingerprint_similar_by_hash Read-only

find js fingerprint similar by hash
search_jsfingerprints_by_bundler Read-only

search jsfingerprints by bundler
search_jsfingerprints_by_library Read-only

search jsfingerprints by library
search_jsfingerprints_by_library_version Read-only

search jsfingerprints by library version
search_jsfingerprints_by_fuzzy_hash Read-only

search jsfingerprints by fuzzy hash
search_jsfingerprints_by_md5 Read-only

search jsfingerprints by md5
search_jsfingerprints_by_normalized_hash Read-only

search jsfingerprints by normalized hash
search_jsfingerprints_by_sha1 Read-only

search jsfingerprints by sha1
search_jsfingerprints_by_sha256 Read-only

search jsfingerprints by sha256
get_jsfingerprint Read-only

get jsfingerprint
get_jsfingerprint_similar Read-only

get jsfingerprint similar
get_jsfingerprint_similarity_counts Read-only

get jsfingerprint similarity counts
get_jsfingerprint_source Read-only

get jsfingerprint source
get_jsfingerprint_bundle_stats Read-only

get jsfingerprint bundle stats
get_jsfingerprint_library_stats Read-only

get jsfingerprint library stats
get_jsfingerprint_hash_prevalence Read-only

get jsfingerprint hash prevalence

This list was read from the server itself, by connecting to it and calling tools/list on 24 September 2026. It is what the server actually exposes, not what its listing claims.

Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. The registry stores tool names only; connect the server for its live schemas.

ScanMalware.com URL Scanner MCP server