ZV-2026-1712 · 2026-10-02 · mcp.scanmalware.com
mcp.scanmalware.com: scan_type on submit_scan narrowed to a closed enum (public, unlisted, private); previously valid values may now be rejected.
breaking
What changed
scan_type on submit_scan narrowed to a closed enum (public, unlisted, private); previously valid values may now be rejected.
What to do
If your agents call mcp.scanmalware.com, pin the new snapshot, patch the affected call sites, and let a green contract check confirm the fix. If you don't use the changed tools, nothing is required, but the rest of the ecosystem just learned about it at the same moment you did.
The redline
− open + enum[public,unlisted,private] submit_scan − Get favicon statistics. + Get favicon statistics. This aggregate query can take up to 90 seconds by default. get_favicon_stats − Search JS fingerprints by library name. + Search JS fingerprints by detected library name. Use identifiers from get_js_library_inven… search_js_fingerprint_by_library − Search JS fingerprints by patterns. + Search JS fingerprints by patterns. Supply at least one boolean filter: has_eval, has_cryp… search_js_fingerprint_patterns − Search JS malware families. + Search JS malware families. Supply min_cluster_size (at least 1) or similarity_threshold (… search_js_malware_families − Search JS obfuscation signals. + Search JS obfuscation signals. Supply at least one of risk_level, min_risk_score, or has_e… search_js_obfuscation − Search OCR text (paginated). + Search OCR text (paginated). q must contain at least 3 characters after trimming. This que… search_ocr − Submit a URL for scanning. + Submit a URL to ScanMalware for scanning. WARNING: scan_type defaults to 'public', which p… submit_scan