Skip to main content
Glama

scry-mcp

MCP (Model Context Protocol) server for the Scry corpus. Wraps the scry-api public endpoints as agent-callable tools.

Hosted at mcp.tunnelmind.ai. MCP spec version 2025-03-26. Streamable HTTP transport.

Tools (v0.1)

Tool

Wraps

Tier

scry_check

GET /v1/check/{ip}

Free

Future tools (deferred to defender tier; need ATAP attestation):

  • scry_watch — subscribe to state changes for an IP/domain

  • scry_actor — full actor profile

  • scry_campaign — campaign detail

Related MCP server: Chaitin IP Intelligence Search Tool

Wire protocol

POST https://mcp.tunnelmind.ai/mcp
Content-Type: application/json

{"jsonrpc":"2.0","id":1,"method":"initialize"}

Methods:

  • initialize — handshake, returns { protocolVersion, capabilities, serverInfo }

  • notifications/initialized — client → server notification (returns 204)

  • tools/list — returns { tools: [...] }

  • tools/call{ name, arguments }{ content: [{ type: "text", text }] }

  • ping — returns {}

Discovery:

GET https://mcp.tunnelmind.ai/
→ { service, version, protocol, transport, endpoint, tools }

Layout

src/
  worker.js   transport (JSON-RPC 2.0 over POST /mcp)
  tools.js    tool definitions + handlers
test/
  tools.test.js   unit tests for tool registry

Setup

npm test
npx wrangler deploy

No bindings, no secrets — this Worker is a thin proxy with no state.

A
license - permissive license
-
quality - not tested
F
maintenance

Maintenance

Maintainers
Response time
Release cycle
Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • A
    license
    -
    quality
    C
    maintenance
    Enables AI-powered threat intelligence analysis of IPs, domains, URLs, and file hashes across multiple threat intelligence platforms (VirusTotal, AlienVault OTX, AbuseIPDB, IPinfo) with APT attribution and interactive reporting through natural language queries.
    Last updated
    40
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    Enables checking IP reputations and threat intelligence by querying Chaitin's global honeypot network and millions of defense nodes. Provides real-time IP profiling, malicious behavior detection, and threat alerts based on aggregated security data.
    Last updated
    1
    16
    2
    MIT
  • F
    license
    A
    quality
    -
    maintenance
    Provides real-time threat intelligence including IP risk scores, CVE lookups, and malware hash analysis without requiring an API key. It enables users to monitor active threats, predict CISA KEV additions, and detect pre-attack infrastructure staging through natural language.
    Last updated
    8

View all related MCP servers

Related MCP Connectors

  • ThreatFox MCP — abuse.ch indicator-of-compromise feed (free, key required)

  • AI-powered threat intelligence, smart contract auditing, and cybersecurity OSINT.

  • 55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/TunnelMind/scry-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server