---
title: "ScanMalware connector on Claude: rank and tools · OpenApps"
description: "On Oct 29, 2026, ScanMalware is a connector on Claude by Triop AB, ranked #3212 in Community connectors by popularity."
url: https://theopenapps.com/claude/connectors/scanmalware-bfca0b
---

> AI agents: this is one page of OpenApps as Markdown. https://theopenapps.com/llms.txt maps the site, the API and the MCP server.

# ScanMalware

[Triop AB](https://theopenapps.com/publishers/triop)

[ChatGPT](https://theopenapps.com/chatgpt/apps/scanmalware) Claude Connector [AppSec & vulnerabilities](https://theopenapps.com/tags/appsec) [Web data extraction](https://theopenapps.com/tags/web-data-extraction) [IT & security teams](https://theopenapps.com/tags/for-it-security)

ScanMalware renders URLs in a sandboxed headless browser and keeps every scan in a searchable archive. This connector lets Claude ask what the archive already knows about a domain, URL or IP address, and pivot from one suspicious page to related infrastructure. What it can do: - Read a scan's verdict and risk factors, network requests, IOCs, TLS and JARM details, detected technologies, YARA matches, OCR text and RDAP data. - Find related scans by domain, IP, ASN, JARM signature, favicon hash, screenshot hash, TLSH/ssdeep/sdhash fuzzy hash, OCR text, tracking keys or JavaScript fingerprint. - Look up Certificate Transparency records for a domain or IP. - Submit a new URL for scanning and wait for the result. 126 of the 128 tools are read-only. The two write tools submit a URL for scanning and vote on a scan as safe or malicious. Every new scan must declare its visibility: "public" publishes the URL and its results in the public feed, while "unlisted" keeps them out of public listings. No account or API key is needed. ScanMalware is operated by Triop AB in Sweden.

[Open in Claude](https://claude.ai/directory/94a037c3-26f6-4a04-be0c-ebb13fbfca0b) [Website](https://scanmalware.com/)

[Top rank now #3,212 NEW to the chart Community connectors by popularity](https://theopenapps.com/claude/connectors/scanmalware-bfca0b?tab=ranks&slug=claude%3Acommunity%3Apopularity) [Peak (14d) #3,208 Community connectors by popularity](https://theopenapps.com/claude/connectors/scanmalware-bfca0b?tab=ranks&slug=claude%3Acommunity%3Apopularity)

Popularity score 4,954 Reported Oct 29

Launched Oct 7, 2026

[Overview](https://theopenapps.com/claude/connectors/scanmalware-bfca0b) [Ranks](https://theopenapps.com/claude/connectors/scanmalware-bfca0b?tab=ranks) [Changes](https://theopenapps.com/claude/connectors/scanmalware-bfca0b?tab=changes)

## Where it stands

[Community connectors by popularity #3,212 NEW to the chart NEW to the chart Peak #3,208 in 14d](https://theopenapps.com/claude/connectors/scanmalware-bfca0b?tab=ranks&slug=claude%3Acommunity%3Apopularity) [Community connectors trending #1,463 NEW to the chart NEW to the chart Peak #1,460 in 14d](https://theopenapps.com/claude/connectors/scanmalware-bfca0b?tab=ranks&slug=claude%3Acommunity%3Atrending)

## Tools

* `find_js_fingerprint_similar_by_hash`
* `get_ai_analysis`
* `get_analyzer_results`
* `get_analyzer_stats`
* `get_api_root`
* `get_bot_protection`
* `get_capabilities_by_date`
* `get_clipboard_events`
* `get_clipboard_stats`
* `get_cpe_by_scan`
* `get_cpe_stats`
* `get_ct_certificates`
* `get_ct_dns_records`
* `get_ct_domains_by_ip`
* `get_ct_similar_domains`
* `get_ct_timeline`
* `get_domain_history`
* `get_domain_scans`
* `get_domain_stats`
* `get_favicon`
* `get_favicon_stats`
* `get_health`
* `get_ids_alerts`
* `get_ip_stats`
* `get_jarm_signatures`
* `get_jarm_stats`
* `get_js_fingerprints`
* `get_js_library_inventory`
* `get_js_runtime_behaviour`
* `get_js_runtime_coverage`
* `get_js_runtime_health`
* `get_js_runtime_stats`
* `get_js_segments_by_scan`
* `get_js_segments_suspicious`
* `get_js_segments_unknown`
* `get_jsfingerprint`
* `get_jsfingerprint_bundle_stats`
* `get_jsfingerprint_hash_prevalence`
* `get_jsfingerprint_library_stats`
* `get_jsfingerprint_similar`
* `get_jsfingerprint_similarity_counts`
* `get_jsfingerprint_source`
* `get_latest_capabilities`
* `get_malware_by_scan`
* `get_malware_stats`
* `get_netlog`
* `get_ocr_by_scan`
* `get_ocr_stats`
* `get_open_graph`
* `get_pastejacking`
* `get_pcap_metadata`
* `get_platform_stats`
* `get_popular_technologies`
* `get_rdap`
* `get_recent_scans`
* `get_recent_threats`
* `get_recent_yara_threats`
* `get_safe_browsing`
* `get_safe_browsing_stats`
* `get_scan_ioc`
* `get_scan_progress`
* `get_scan_reports`
* `get_scan_result`
* `get_scan_summary`
* `get_screenshot_stats`
* `get_technologies_by_scan`
* `get_technology_combinations`
* `get_technology_stats`
* `get_tls_asn1`
* `get_tls_details`
* `get_top_tracking_keys`
* `get_yara_by_scan`
* `get_yara_matches`
* `get_yara_stats`
* `run_js_differential_analysis`
* `search_ai_classification`
* `search_ai_high_risk`
* `search_ai_scam_type`
* `search_analyzer_high_risk`
* `search_by_asn`
* `search_by_favicon`
* `search_by_fuzzy_hash`
* `search_by_ip`
* `search_by_jarm`
* `search_by_nameserver`
* `search_by_registrar`
* `search_by_screenshot_hash`
* `search_cpe`
* `search_favicon_mmh3`
* `search_js_fingerprint_by_bundler`
* `search_js_fingerprint_by_cdn`
* `search_js_fingerprint_by_fuzzy_hash`
* `search_js_fingerprint_by_library`
* `search_js_fingerprint_by_library_version`
* `search_js_fingerprint_by_md5`
* `search_js_fingerprint_by_normalized_hash`
* `search_js_fingerprint_by_server`
* `search_js_fingerprint_by_sha1`
* `search_js_fingerprint_by_sha256`
* `search_js_fingerprint_obfuscated`
* `search_js_fingerprint_patterns`
* `search_js_malware_families`
* `search_js_obfuscation`
* `search_js_runtime_by_composite_hash`
* `search_js_runtime_by_signature`
* `search_js_runtime_similar`
* `search_js_segments_by_hash`
* `search_js_segments_by_normalized_hash`
* `search_jsfingerprints_by_bundler`
* `search_jsfingerprints_by_fuzzy_hash`
* `search_jsfingerprints_by_library`
* `search_jsfingerprints_by_library_version`
* `search_jsfingerprints_by_md5`
* `search_jsfingerprints_by_normalized_hash`
* `search_jsfingerprints_by_sha1`
* `search_jsfingerprints_by_sha256`
* `search_ocr`
* `search_ocr_pattern`
* `search_scans`
* `search_semantic`
* `search_similar_scans`
* `search_similar_screenshots`
* `search_suspicious_clipboard`
* `search_technologies`
* `search_tracking_key`
* `submit_scan`
* `submit_scan_report`
* `wait_for_scan`

## Details

Publisher

[Triop AB](https://theopenapps.com/publishers/triop)

Kind

Connector

Website

[scanmalware.com](https://scanmalware.com/)

Privacy

[github.com](https://github.com/scanmalware/mcp-server/blob/main/PRIVACY.md)

Listing ID

94a037c3-26f6-4a04-be0c-ebb13fbfca0b

## Also on

* [**ChatGPT · App** #65 2 up · 1d Security](https://theopenapps.com/chatgpt/apps/scanmalware)
* [**Claude · Plugin** #22 IT & security · among plugins](https://theopenapps.com/claude/plugins/scanmalware)

## MCP server

Host

mcp.scanmalware.com

Status

No data yet

## Badge

```markdown
[![Listed on OpenApps](https://theopenapps.com/badge/claude/connectors/scanmalware-bfca0b.svg)](https://theopenapps.com/claude/connectors/scanmalware-bfca0b)
```