{"_id":"scannd-mcp","_rev":"3-ff2d2268974de021524dab56660a2361","name":"scannd-mcp","dist-tags":{"latest":"0.1.1"},"versions":{"0.1.0":{"name":"scannd-mcp","version":"0.1.0","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","nuclei","scannd"],"author":{"url":"scannd.com","name":"Scannd"},"license":"MIT","_id":"scannd-mcp@0.1.0","maintainers":[{"name":"zachforrest","email":"mail@zachforrest.com"}],"homepage":"https://scannd.com","bugs":{"url":"https://github.com/zachforrest/webscannerio/issues"},"bin":{"scannd-mcp":"dist/index.js"},"dist":{"shasum":"80750e1511875bc0f5e9a605fb25a45375bcd038","tarball":"https://registry.npmjs.org/scannd-mcp/-/scannd-mcp-0.1.0.tgz","fileCount":14,"integrity":"sha512-tYnq3OzS9weqo5ZHofIoFYMqFE9wHkVyA7FFuRnMu92CyEvfkUykspdOK9mUQek2LO9ZzpMPOMiUtT8DkmJ61A==","signatures":[{"sig":"MEUCIQDjBwgfi3feb6IfpR42anYCnVRiSDqZgg1Jd/IJk4p3rgIgPkQDo5iAcb9dCGKeEMqaW5oOSTMkRls61pm6M/OWSHo=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":29888},"main":"dist/index.js","type":"module","engines":{"node":">=18"},"gitHead":"24b3fa7e123e1f087deefca841b38a2f319078c9","mcpName":"com.scannd/scannd","scripts":{"build":"tsc","start":"node dist/index.js","prepublishOnly":"npm run build"},"_npmUser":{"name":"zachforrest","email":"mail@zachforrest.com"},"repository":{"url":"git+https://github.com/zachforrest/webscannerio.git","type":"git","directory":"mcp"},"_npmVersion":"10.9.8","description":"MCP server for Scannd (scannd.com) — trigger security scans and read reports/vulnerabilities from AI agents. Talks to the hosted Scannd REST API.","directories":{},"_nodeVersion":"22.23.1","dependencies":{"zod":"^3.23.8","@modelcontextprotocol/sdk":"^1.0.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"typescript":"^5.5.4","@types/node":"^20.14.0"},"_npmOperationalInternal":{"tmp":"tmp/scannd-mcp_0.1.0_1784122537797_0.8313688424200085","host":"s3://npm-registry-packages-npm-production"},"deprecated":"Points at the retired hook.webscanner.io backend. Upgrade: npm i scannd-mcp@latest"},"0.1.1":{"name":"scannd-mcp","version":"0.1.1","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","nuclei","scannd"],"author":{"url":"scannd.com","name":"Scannd"},"license":"MIT","_id":"scannd-mcp@0.1.1","maintainers":[{"name":"zachforrest","email":"mail@zachforrest.com"}],"homepage":"https://scannd.com","bugs":{"url":"https://github.com/zachforrest/scannd/issues"},"bin":{"scannd-mcp":"dist/index.js"},"dist":{"shasum":"42d1130551bac9be2881fd76ce8109c06a544e62","tarball":"https://registry.npmjs.org/scannd-mcp/-/scannd-mcp-0.1.1.tgz","fileCount":14,"integrity":"sha512-O+pS5FtyfIv2Xo5c/cVlOCXFOrFaNl5SWW4IXv9N4P9NbK+2Y6HTwzJWP4e+H2b6TSjDhQ5GQr8X8cCw3Rbuow==","signatures":[{"sig":"MEUCIQDur4sIdQihvrNCjQPAGyPrMdLuFeP9dK7OHqC039EmEAIgP9fLulXr8Pmf5bkl4UHiI9fUdebKV2bF39WQEUCQimA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":29876},"main":"dist/index.js","type":"module","engines":{"node":">=18"},"gitHead":"4c314dd66cae851f0fff2f6a186100b1961daa7b","mcpName":"com.scannd/scannd","scripts":{"build":"tsc","start":"node dist/index.js","prepublishOnly":"npm run build"},"_npmUser":{"name":"zachforrest","email":"mail@zachforrest.com"},"repository":{"url":"git+https://github.com/zachforrest/scannd.git","type":"git","directory":"backend/mcp"},"_npmVersion":"10.9.8","description":"MCP server for Scannd (scannd.com) — trigger security scans and read reports/vulnerabilities from AI agents. Talks to the hosted Scannd REST API.","directories":{},"_nodeVersion":"22.23.1","dependencies":{"zod":"^3.23.8","@modelcontextprotocol/sdk":"^1.0.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"typescript":"^5.5.4","@types/node":"^20.14.0"},"_npmOperationalInternal":{"tmp":"tmp/scannd-mcp_0.1.1_1785022977442_0.7382502428737019","host":"s3://npm-registry-packages-npm-production"}}},"time":{"created":"2026-07-15T13:35:37.611Z","modified":"2026-07-25T23:47:41.522Z","0.1.0":"2026-07-15T13:35:37.933Z","0.1.1":"2026-07-25T23:42:57.604Z"},"bugs":{"url":"https://github.com/zachforrest/scannd/issues"},"author":{"url":"scannd.com","name":"Scannd"},"license":"MIT","homepage":"https://scannd.com","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","nuclei","scannd"],"repository":{"url":"git+https://github.com/zachforrest/scannd.git","type":"git","directory":"backend/mcp"},"description":"MCP server for Scannd (scannd.com) — trigger security scans and read reports/vulnerabilities from AI agents. Talks to the hosted Scannd REST API.","maintainers":[{"name":"zachforrest","email":"mail@zachforrest.com"}],"readme":"<p align=\"center\">\n  <img src=\"logo.png\" alt=\"Scannd\" width=\"120\" height=\"120\" />\n</p>\n\n# scannd-mcp\n\nMCP server for **[Scannd](https://scannd.com)** — trigger security scans and read\nreports/vulnerabilities directly from AI agents (Claude Desktop, Claude Code, Cursor, etc.).\n\nIt runs locally over **stdio** and calls the hosted Scannd REST API at\n`https://api.scannd.com`. Nothing to self-host; you just need an API key.\n\n## Quick start\n\n```bash\nnpx scannd-mcp\n```\n\nThe server needs one environment variable, `SCANND_API_KEY`, which it sends to the API\nas the **`X-API-Key`** header:\n\n```bash\nSCANND_API_KEY=sk_your_key_here npx scannd-mcp\n```\n\nGet a key at **https://scannd.com**. The **free tier includes 2 scans/month** — enough\nto try the full trigger → poll → report flow end to end.\n\n## Client configuration\n\nAdd this to your MCP client config (e.g. Claude Desktop `claude_desktop_config.json`,\nor `.mcp.json` for Claude Code):\n\n```json\n{\n  \"mcpServers\": {\n    \"scannd\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"scannd-mcp\"],\n      \"env\": {\n        \"SCANND_API_KEY\": \"sk_your_key_here\"\n      }\n    }\n  }\n}\n```\n\n> The API key is your credential — keep it in the client's `env`/secrets, never commit it.\n\n## Environment variables\n\n| Variable          | Required | Default                      | Purpose                                                        |\n| ----------------- | -------- | ---------------------------- | -------------------------------------------------------------- |\n| `SCANND_API_KEY`  | **yes**  | —                            | Your `sk_`-prefixed key. Sent as the `X-API-Key` request header. |\n| `SCANND_BASE_URL` | no       | `https://api.scannd.com`     | Override the API endpoint (rarely needed).                     |\n\n## Tools\n\nTools are **discovered at runtime** via the MCP `tools/list` request — they are not\ndeclared statically. This server exposes 8:\n\n| Tool                 | What it does                                                                             |\n| -------------------- | --------------------------------------------------------------------------------------- |\n| `trigger_scan`       | Queue a security scan for a target; returns a `scan_id` to poll.                         |\n| `get_scan_status`    | Poll the status of a previously triggered scan.                                          |\n| `list_reports`       | List past scan reports for a target (metadata only).                                     |\n| `get_report`         | Get the full content of a specific report (or the latest, if `report_id` is omitted).   |\n| `get_vulnerabilities`| Get findings from a report, optionally filtered by severity.                             |\n| `get_domain_summary` | High-level summary of a target: subscription tier, scan history, and vulnerability counts. |\n| `list_templates`     | List the scan tiers available to `trigger_scan`.                                         |\n| `list_targets`       | List the targets this API key can act on (id, domain, label).                            |\n\n## Requirements\n\n- Node.js **>= 18** (uses the built-in global `fetch`).\n\n## License\n\nMIT — see [LICENSE](LICENSE).\n","readmeFilename":"README.md"}