KosmoKrator

data

urlscan.io MCP Gateway for AI Agents

Expose urlscan.io tools to Claude Code, Cursor, Codex, and other MCP clients through the local KosmoKrator MCP gateway.

urlscan.io MCP Gateway

Expose urlscan.io to MCP clients with `kosmokrator mcp:serve --integration=urlscan`.

If the client has never used KosmoKrator before, install it first, then register this integration as a stdio MCP server.

Install KosmoKrator 
curl -fsSL https://raw.githubusercontent.com/OpenCompanyApp/kosmokrator/main/install.sh | bash
Install gateway entry 
kosmokrator mcp:gateway:install --integration=urlscan --write=deny --json
MCP configuration 
{
  "mcpServers": {
    "kosmokrator-urlscan": {
      "type": "stdio",
      "command": "kosmo",
      "args": [
        "mcp:serve",
        "--integration=urlscan",
        "--write=deny"
      ]
    }
  }
}
Serve manually 
kosmokrator mcp:serve --integration=urlscan --write=deny

Client Notes

Use one scoped MCP gateway entry, then adapt the config location to the client or framework.

Claude Code Connect local KosmoKrator integrations to Claude Code through one scoped MCP gateway entry. Claude Code can launch the local kosmo binary directly from the project MCP config.
Cursor Expose selected local integrations to Cursor through KosmoKrator without configuring each service as its own MCP server. Use the same KosmoKrator install and integration credentials that power terminal and headless runs.
Codex Use KosmoKrator as a local MCP proxy for Codex so coding sessions can reach selected integrations with explicit write policy. Keep write access denied or ask-based unless the workspace is trusted.
OpenAI Agents SDK Attach KosmoKrator integration tools to OpenAI Agents SDK workflows through a local MCP gateway. Use headless JSON commands for CI-style execution and MCP for agent tool discovery.
Claude Agent SDK Give Claude Agent SDK workflows access to KosmoKrator integrations through a local MCP server. Use a narrow integration list so the agent does not load unrelated tools.
Vercel AI SDK Use KosmoKrator as a local integration gateway for Vercel AI SDK agents and scripts. Prefer CLI JSON calls when a workflow only needs one deterministic integration operation.
LangChain Bridge LangChain agents to local KosmoKrator integration tools through MCP or headless CLI calls. Keep the gateway scoped to the integration and operation class needed by the chain.
LangGraph Run KosmoKrator integration calls from LangGraph nodes while preserving local credentials and permissions. Headless CLI calls fit repeatable graph edges; MCP fits exploratory agent nodes.
CrewAI Expose KosmoKrator integrations to CrewAI workers as scoped local tools. Use per-worker integration scopes to avoid giving every worker every tool.
Generic MCP Clients Connect any stdio-compatible MCP client to local KosmoKrator integration tools. Start with read-only write policy and expand only for trusted projects.

MCP Tool Names

KosmoKrator exposes integration tools through the gateway with stable names.

MCP toolSource functionType
integration__urlscan__urlscan_submit_scan urlscan.urlscan_submit_scan Write write
integration__urlscan__urlscan_search_datasource urlscan.urlscan_search_datasource Read read
integration__urlscan__urlscan_get_result urlscan.urlscan_get_result Read read
integration__urlscan__urlscan_get_screenshot urlscan.urlscan_get_screenshot Read read
integration__urlscan__urlscan_get_dom urlscan.urlscan_get_dom Read read
integration__urlscan__urlscan_get_response urlscan.urlscan_get_response Read read
integration__urlscan__urlscan_update_result_visibility urlscan.urlscan_update_result_visibility Write write
integration__urlscan__urlscan_delete_result_visibility urlscan.urlscan_delete_result_visibility Write write
integration__urlscan__urlscan_get_available_countries urlscan.urlscan_get_available_countries Read read
integration__urlscan__urlscan_get_user_agents urlscan.urlscan_get_user_agents Read read
integration__urlscan__urlscan_get_quotas urlscan.urlscan_get_quotas Read read
integration__urlscan__urlscan_get_available_brands urlscan.urlscan_get_available_brands Read read
integration__urlscan__urlscan_get_brand_summary urlscan.urlscan_get_brand_summary Read read
integration__urlscan__urlscan_get_phishfeed urlscan.urlscan_get_phishfeed Read read
integration__urlscan__urlscan_get_livescan_scanners urlscan.urlscan_get_livescan_scanners Read read
integration__urlscan__urlscan_create_livescan_task urlscan.urlscan_create_livescan_task Write write
integration__urlscan__urlscan_create_livescan_scan urlscan.urlscan_create_livescan_scan Write write
integration__urlscan__urlscan_get_livescan_resource urlscan.urlscan_get_livescan_resource Read read
integration__urlscan__urlscan_store_livescan_result urlscan.urlscan_store_livescan_result Read read
integration__urlscan__urlscan_discard_livescan_result urlscan.urlscan_discard_livescan_result Read read
integration__urlscan__urlscan_get_hostname_history urlscan.urlscan_get_hostname_history Read read
integration__urlscan__urlscan_get_pro_username urlscan.urlscan_get_pro_username Read read
integration__urlscan__urlscan_get_similar_results urlscan.urlscan_get_similar_results Read read
integration__urlscan__urlscan_list_saved_searches urlscan.urlscan_list_saved_searches Read read
integration__urlscan__urlscan_create_saved_search urlscan.urlscan_create_saved_search Write write
integration__urlscan__urlscan_update_saved_search urlscan.urlscan_update_saved_search Write write
integration__urlscan__urlscan_delete_saved_search urlscan.urlscan_delete_saved_search Write write
integration__urlscan__urlscan_get_saved_search_results urlscan.urlscan_get_saved_search_results Read read
integration__urlscan__urlscan_list_subscriptions urlscan.urlscan_list_subscriptions Read read
integration__urlscan__urlscan_create_subscription urlscan.urlscan_create_subscription Write write
integration__urlscan__urlscan_update_subscription urlscan.urlscan_update_subscription Write write
integration__urlscan__urlscan_delete_subscription urlscan.urlscan_delete_subscription Write write
integration__urlscan__urlscan_get_subscription_results urlscan.urlscan_get_subscription_results Read read
integration__urlscan__urlscan_list_channels urlscan.urlscan_list_channels Read read
integration__urlscan__urlscan_create_channel urlscan.urlscan_create_channel Write write
integration__urlscan__urlscan_get_channel urlscan.urlscan_get_channel Read read
integration__urlscan__urlscan_update_channel urlscan.urlscan_update_channel Write write
integration__urlscan__urlscan_create_incident urlscan.urlscan_create_incident Write write
integration__urlscan__urlscan_get_incident urlscan.urlscan_get_incident Read read
integration__urlscan__urlscan_update_incident urlscan.urlscan_update_incident Write write
integration__urlscan__urlscan_close_incident urlscan.urlscan_close_incident Read read
integration__urlscan__urlscan_restart_incident urlscan.urlscan_restart_incident Read read
integration__urlscan__urlscan_copy_incident urlscan.urlscan_copy_incident Read read
integration__urlscan__urlscan_fork_incident urlscan.urlscan_fork_incident Read read
integration__urlscan__urlscan_get_watchable_attributes urlscan.urlscan_get_watchable_attributes Read read
integration__urlscan__urlscan_get_incident_states urlscan.urlscan_get_incident_states Read read
integration__urlscan__urlscan_list_datadumps urlscan.urlscan_list_datadumps Read read
integration__urlscan__urlscan_get_datadump_link urlscan.urlscan_get_datadump_link Read read
integration__urlscan__urlscan_download_file urlscan.urlscan_download_file Read read
integration__urlscan__urlscan_lookup_malicious_observable urlscan.urlscan_lookup_malicious_observable Read read

Write Access

Start with --write=deny for read-only MCP clients. Use --write=ask or --write=allow only when the client and workspace are trusted.