Skip to main content
Glama

SecScan

by us.secscan
OverviewDiscussionsAdmin

Scan a website

scan_url

Start a SecScan security scan of a web application the user owns or is authorised to test. Returns a scan_id; most scans finish in under a minute — then call get_scan_status with wait_seconds, or get_report. Active tests (injection, XSS, SSRF…) run only on domains the user has verified; others get passive checks. Optionally also reads a GitHub repository's source (github_repo): any public one, or a private one the user connected at secscan.us. That only contacts GitHub, never the site. Each scan uses one of the user's free scans, plan scans or credits.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
urlYesThe URL to scan, e.g. https://example.com
github_repoNoOptional GitHub repository to read, e.g. https://github.com/owner/repo. Public, or private if the user connected it under Connect GitHub on secscan.us.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • changedInput schema / properties / github_repo / description
      Previous value: -"Optional public GitHub repository to check for committed secrets, e.g. https://github.com/owner/repo. Public repositories only."New value: +"Optional GitHub repository to read, e.g. https://github.com/owner/repo. Public, or private if the user connected it under Connect GitHub on secscan.us."
  2. First observed

TDQS

Score is being calculated.

All SecScan toolsInspect
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources