ScanMalware.com URL Scanner — Claude Code MCP server
Connect an agent to ScanMalware.com to submit URLs, inspect scan results, search findings, and retrieve TLS details. Useful when investigating a suspicious link.
claude mcp add --transport http scanmalware-mcp https://mcp.scanmalware.com/mcpWhat ScanMalware.com URL Scanner does
This MCP server connects an agent to the public ScanMalware.com API. It can submit a URL for scanning, retrieve status and risk indicators, search scan records, and fetch TLS or certificate details. For a phishing investigation, an agent can start a scan, wait for completion, then summarize the findings.
Choose scan visibility before submission. Public scans appear in ScanMalware’s public feed; private scans require an authenticated ScanMalware account. Private access needs SCANMALWARE_BEARER_TOKEN. MCP_AUTH_TOKEN protects access to the MCP server and does not authenticate with ScanMalware. That distinction matters for confidential URLs. OCR searches need at least three characters after trimming.
What it helps with
- submit a URL and retrieve its scan risk score
- search scan records for a brand or phrase
- inspect TLS details and certificate data
- collect indicators from a suspicious link scan
Example prompts for the agent
- Scan this URL as
unlisted, wait for completion, then report its status, risk score, and main indicators. - Search scans for “acme login” and list their IDs, URLs, and any high-risk results.
- Retrieve TLS and certificate details for scan
1234...abcd, then summarize the issuer and validity dates.
How to install ScanMalware.com URL Scanner
Platform CLI: remote server
claude mcp add --transport http scanmalware-mcp https://mcp.scanmalware.com/mcpPlatform CLI: remote server
codex mcp add scanmalwarecom-url-scanner --url https://mcp.scanmalware.com/mcpConfig file
{
"mcpServers": {
"scanmalwarecom-url-scanner": {
"url": "https://mcp.scanmalware.com/mcp"
}
}
}Config file
{
"servers": {
"scanmalwarecom-url-scanner": {
"type": "http",
"url": "https://mcp.scanmalware.com/mcp"
}
}
}Platform CLI: remote server
gemini mcp add -t http scanmalwarecom-url-scanner https://mcp.scanmalware.com/mcpStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about ScanMalware.com URL Scanner
How do I install ScanMalware.com URL Scanner in Claude Code?
Run claude mcp add --transport http scanmalware-mcp https://mcp.scanmalware.com/mcp. The server then connects over HTTP.
What does ScanMalware.com URL Scanner do?
It gives an agent access to ScanMalware.com for URL scans, scan searches, risk findings, and TLS or certificate details.
What do the scan visibility options mean?
Choose public, unlisted, or private before submitting. Private scans require SCANMALWARE_BEARER_TOKEN; public scans expose the URL and results in the public feed.
