bots.st/scry
Scry
IPv4 lookups and attacker-observation rollups
1746 ms
answered our call
- State
- Answered
- Protocol
- MCP 2025-03-26
- Tools listed
- 12
- Answered
- 3 of the last 3 calls
How to reach it
- MCP, HTTP
https://mcp.tunnelmind.ai/mcp
What it can do
| Tool | What it says it does |
|---|---|
scry_asn | Roll-up of corpus activity for a single ASN — observation count, distinct source IPs, actor count, scanner count, high-confidence actor count, and per-protocol breakdown. |
scry_campaign | Single campaign detail by id (format: c[0-9a-f]{15}). |
scry_campaigns | Active threat campaigns — coordinated attacker activity that exceeds the noise floor. ≥5 distinct actors, ≥3 ASNs, ≤5 destination ports, ≥1h history. |
scry_check | Returns Scry's corpus knowledge for a single IPv4 address: when it was first/last observed, observation count, protocols and ports targeted, ASN, country, category (actor/scanner/not_observed), and confidence_bucket (low/medium/high). Use when an agent needs IP triage, hostility assessment, or… |
scry_check_bulk | Look up many IPv4 addresses in one request. Up to 100 IPs per call. Same per-IP shape as scry_check, keyed by IP. |
scry_country | Roll-up of corpus activity by ISO country code. Same shape as scry_asn. |
scry_recent | Recent observations feed — aggregated by source IP within a time window. Cursor-paginated via since_ms. |
scry_stats | Returns aggregate Scry corpus telemetry: total observation count, distinct source IPs, first/last observation timestamps, last-24h activity, and per-protocol breakdowns. Useful as a liveness/density check before issuing per-IP queries — lets an agent decide whether the corpus has enough data to be… |
scry_timeseries | Bucketed observation counts over time. Detect bursts, plot trends, sanity-check whether attacker activity is rising or falling. |
scry_tool | Single tool detail by 16-char hex id from scry_tools. |
scry_tools | List detected attack tools — (protocol, payload, path) tuples sent by 3+ distinct source IPs. Aggregate metadata only; never lists member actors. |
scry_top | Top-N source dimensions over a time window. Useful for situational awareness — 'where is the noise coming from right now?' |
In its maker's words
Free IPv4 lookups against a distributed attacker-observation corpus.
- Website
- api.tunnelmind.ai
- Source
- github.com/TunnelMind/scry-mcp
- Publisher
- tunnelmind.ai (3 listings in the registry)
- Listed from
- the official MCP Registry as
ai.tunnelmind/scry - Version
- 0.5.0, updated 25 May 2026
- Kinds of work
- Security and trust, Search and research
The domain it lives on
- tunnelmind.ai
- registered 25 Feb 2026 (8 months ago), at Cloudflare, Inc., its name does not resolve now
From our own crawl of domain names: registry records and the home page as our crawler last saw it.
Every call we made
| When | What happened | Time |
|---|---|---|
| Answered | 1746 ms | |
| Answered | 3271 ms | |
| Answered | 1102 ms |
Next door
- paidforAssess an x402 seller before payment
- WhisperDNS-verifiable agent networking and control
- EchelonGraph CVE & ExposureCVE and internet exposure lookups
- RevClamp MCP ServerAudits payments, disputes, and VAT compliance
- APIEmpresas: Spanish company dataKYB checks using CIF, directors, sanctions, tenders, BORME
Is this your bot? Claim its address to add a verified badge and keep the listing current.