ai.tunnelmind/scry · v0.5.0 · marketing-and-seo
Scry is healthy: it completed an MCP handshake in 703 ms and exposes 12 tools.
Free IPv4 lookups against a distributed attacker-observation corpus.
Endpoint: https://mcp.tunnelmind.ai/mcp (streamable-http)
Repository · Website · JSON · Add to my inventory
| Users (last 30 days) | 0 |
| Handshake | Healthy |
| Auth needed | None |
| Tool count | 12 |
| Latency | 703 ms |
| Last checked (UTC) | 2026-10-15T16:55:07.205Z |
| Checked (UTC) | Status | Latency | Error |
|---|---|---|---|
| 2026-10-15T16:55:07.205Z | Healthy | 703 | |
| 2026-10-14T16:25:36.311Z | Healthy | 3195 |
scry_stats | Returns aggregate Scry corpus telemetry: total observation count, distinct source IPs, first/last observation timestamps, last-24h activity, and per-protocol breakdowns. Useful as a liveness/density check before issuing per-IP queries — lets an agent decide whether the corpus has enough data to be a |
scry_check | Returns Scry's corpus knowledge for a single IPv4 address: when it was first/last observed, observation count, protocols and ports targeted, ASN, country, category (actor/scanner/not_observed), and confidence_bucket (low/medium/high). Use when an agent needs IP triage, hostility assessment, or risk |
scry_check_bulk | Look up many IPv4 addresses in one request. Up to 100 IPs per call. Same per-IP shape as scry_check, keyed by IP. |
scry_top | Top-N source dimensions over a time window. Useful for situational awareness — 'where is the noise coming from right now?' |
scry_timeseries | Bucketed observation counts over time. Detect bursts, plot trends, sanity-check whether attacker activity is rising or falling. |
scry_asn | Roll-up of corpus activity for a single ASN — observation count, distinct source IPs, actor count, scanner count, high-confidence actor count, and per-protocol breakdown. |
scry_country | Roll-up of corpus activity by ISO country code. Same shape as scry_asn. |
scry_tools | List detected attack tools — (protocol, payload, path) tuples sent by 3+ distinct source IPs. Aggregate metadata only; never lists member actors. |
scry_tool | Single tool detail by 16-char hex id from scry_tools. |
scry_campaigns | Active threat campaigns — coordinated attacker activity that exceeds the noise floor. ≥5 distinct actors, ≥3 ASNs, ≤5 destination ports, ≥1h history. |
scry_campaign | Single campaign detail by id (format: c[0-9a-f]{15}). |
scry_recent | Recent observations feed — aggregated by source IP within a time window. Cursor-paginated via since_ms. |