urlscan.io MCP Server: All 3 Scan Ops for AI Agents

This n8n workflow creates a fully functional MCP (Multi-Chain Protocol) server that exposes all three core operations of the urlscan.io Tool—Perform a scan, Get a scan, and Get many scans—to AI agents and other systems. Using n8n's MCP Trigger node as the entry point, it handles incoming requests, routes them to pre-configured urlscan.io Tool nodes with AI expression placeholders like $fromAI(), and returns native API responses with built-in error handling and retry logic. No manual setup is required; simply import, activate, and use the webhook URL.

The workflow leverages official n8n urlscan.io integration for seamless security scanning of URLs. AI agents automatically populate parameters such as resource IDs, search queries, filters, and payloads. This enables powerful security automation, like on-demand URL analysis for threat detection, bulk scan retrievals, or initiating scans based on AI decisions.

Benefits include time-saving zero-configuration deployment, full error management, and compatibility with tools like Claude Desktop, custom AI apps, or other n8n workflows. Use cases span cybersecurity investigations, automated threat hunting, DevOps pipelines for URL validation, and AI-driven security monitoring, making it ideal for security teams and developers integrating scanning into agentic workflows.