mcp-urlscan-io
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@mcp-urlscan-iosearch for recent scans of example.com"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
@pipeworx/urlscan-io
urlscan.io MCP — URL scanner (renders pages in a sandbox, records HTTP transactions, screenshots, certificates). Free API key for higher rate.
Part of Pipeworx — an MCP gateway connecting AI agents to 1476+ live data sources.
Auth
Some endpoints are keyless (search, result lookup);
submitrequires a key.Platform:
PLATFORM_URLSCAN_KEY. BYO:?_apiKey=….
Related MCP server: PhishTank MCP Server
Tools
search(query, size?, search_after?)— search past scansresult(uuid)— full result by scan uuidsubmit(url, visibility?, country?, tags?, referer?, customagent?, useragent?)— submit a new scan (requires key)domain(domain)— convenience: search by domainip(ip)— convenience: search by IP
Data source
https://urlscan.io/api/v1/
Quick Start
Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):
{
"mcpServers": {
"urlscan-io": {
"url": "https://gateway.pipeworx.io/urlscan-io/mcp"
}
}
}What this endpoint actually serves
tools/list at https://gateway.pipeworx.io/urlscan-io/mcp returns the tools in the table
above plus the shared Pipeworx meta-tools — ask_pipeworx,
discover_tools, search_within, remember/recall and the rest of the
gateway-wide set. So the tool count you see is larger than this table: a
single-pack endpoint currently lists roughly 30 shared tools alongside the
pack's own. The connection's initialize response states its exact scope, and
is the authoritative answer for a given day.
This is deliberate, not multiplexing by accident. The meta-tools are what let a
scoped connection answer a question this pack does not cover — via
ask_pipeworx, which routes across the whole catalog — without you adding a
second MCP server. There is currently no way to mount a pack endpoint without
them; if the extra schemas cost you more context than the routing is worth,
connect to the full gateway once rather than to several pack endpoints.
Or connect to the full Pipeworx gateway to get every pack's tools listed directly, instead of just this one's:
{
"mcpServers": {
"pipeworx": {
"url": "https://gateway.pipeworx.io/mcp"
}
}
}Both URLs reach the same gateway and the same 1476+ data sources. The
only difference is which pack's tools are listed directly; ask_pipeworx
reaches all of them from either one.
Using with ask_pipeworx
Instead of calling tools directly, you can ask questions in plain English — this works on the pack endpoint above as well as on the full gateway:
ask_pipeworx({ question: "your question about Urlscan Io data" })The gateway picks the right tool and fills the arguments automatically.
More
License
MIT
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
No tool schema history has been recorded yet.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Submit files and URLs to a malware sandbox, poll scans, fetch reports, hashes and IOCs.
URLhaus MCP — wraps abuse.ch URLhaus malware URL database (free, no auth)
Domain/IP intelligence, web page capture and search APIs
Breach intelligence API: email search, domain monitoring, passwords and stealer logs.
Related MCP Servers
- AlicenseCqualityDmaintenanceProvides access to a malicious URL database API, enabling users to search, list, and retrieve information about potentially dangerous URLs for security analysis and threat detection.3MIT
- AlicenseAqualityDmaintenanceEnables checking URLs against PhishTank's phishing database, searching for phishing URLs by target or date, and retrieving phishing statistics, with built-in rate limiting and caching.73MIT

scanmalware-mcpofficial
AlicenseNot gradedqualityCmaintenanceWraps the ScanMalware.com API to enable phishing triage, malware scanning, and certificate inspection through natural language, allowing users to submit scans, retrieve results, and analyze threats via MCP tools.Apache 2.0- FlicenseNot gradedqualityDmaintenanceProvides a 'scan_website' tool to analyze target websites for security vulnerabilities by consuming the Website Security Auditor REST API.-
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/pipeworx-io/mcp-urlscan-io'
If you have feedback or need assistance with the MCP directory API, please join our Discord server