Skip to main content
Glama
TunnelMind

scry-mcp

by TunnelMind
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript
Remote

scry-mcp

MCP (Model Context Protocol) server for the Scry corpus. Wraps the scry-api public endpoints as agent-callable tools.

Hosted at mcp.tunnelmind.ai. MCP spec version 2025-03-26. Streamable HTTP transport.

Tools (v0.1)

Tool

Wraps

Tier

scry_check

GET /v1/check/{ip}

Free

Future tools (deferred to defender tier; need ATAP attestation):

  • scry_watch — subscribe to state changes for an IP/domain

  • scry_actor — full actor profile

  • scry_campaign — campaign detail

Related MCP server: KeyboardCrumbs MCP Server

Wire protocol

POST https://mcp.tunnelmind.ai/mcp
Content-Type: application/json

{"jsonrpc":"2.0","id":1,"method":"initialize"}

Methods:

  • initialize — handshake, returns { protocolVersion, capabilities, serverInfo }

  • notifications/initialized — client → server notification (returns 204)

  • tools/list — returns { tools: [...] }

  • tools/call — { name, arguments } → { content: [{ type: "text", text }] }

  • ping — returns {}

Discovery:

GET https://mcp.tunnelmind.ai/
→ { service, version, protocol, transport, endpoint, tools }

Layout

src/
  worker.js   transport (JSON-RPC 2.0 over POST /mcp)
  tools.js    tool definitions + handlers
test/
  tools.test.js   unit tests for tool registry

Setup

npm test
npx wrangler deploy

No bindings, no secrets — this Worker is a thin proxy with no state.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityInactive
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • FastMCP ThreatIntel

    4R9UN
    A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI-powered threat intelligence analysis of IPs, domains, URLs, and file hashes across multiple threat intelligence platforms (VirusTotal, AlienVault OTX, AbuseIPDB, IPinfo) with APT attribution and interactive reporting through natural language queries.
    18 PyPI
    40
    Apache 2.0

  • KeyboardCrumbs MCP Server

    kbcrumbs
    A
    license
    A
    quality
    Not graded
    maintenance
    Provides real-time threat intelligence including IP risk scores, CVE lookups, and malware hash analysis without requiring an API key. It enables users to monitor active threats, predict CISA KEV additions, and detect pre-attack infrastructure staging through natural language.
    8
    74 PyPI
    MIT

  • IP Intelligence MCP Server

    ard1102
    A
    license
    Not graded
    quality
    D
    maintenance
    Provides MCP tools for IP threat intelligence lookup and enrichment, including single IP lookup, bulk hunting, ASN expansion, and feed status queries.
    MIT

  • Nullcone MCP Server

    maco144
    F
    license
    Not graded
    quality
    D
    maintenance
    Provides real-time threat intelligence for AI agents, enabling checks on IPs, domains, URLs, hashes, CVEs, prompt-injection payloads, and malicious AI-skill/MCP-tool definitions against a free database of 890K+ IOCs.
    -