Static malware scanning for your pipeline.

Send a JAR, ZIP, CLASS, or Java file and receive a structured risk report. Files are scanned in memory and are not retained by this API.

PRICING

Monthly plans

Purchases are handled personally through Discord. Choose a plan, join the server, and your API key will be sent after payment is confirmed.

How it works
  1. Choose a plan and continue to the Jarscanner Discord server.
  2. Tell us which tier you want and agree on an available payment method.
  3. After payment clears, we create and send your 30-day API key manually.

Key delivery is currently manual, so it may not be instant.

Tier 1
$5/30 days
  • 200 scans each month
  • Files up to 10 MB
  • Nested JAR inspection
Purchase
Tier 2
$10/30 days
  • 700 scans each month
  • Files up to 20 MB
  • Nested JAR inspection
Purchase
QUICKSTART

One authenticated request

Use the API key as a Bearer token. Raw uploads are recommended for the lowest overhead.

Raw file upload

curl -X POST "https://api.jarscanner.org/v1/scan" \
  -H "Authorization: Bearer jsk_live_YOUR_KEY" \
  -H "Content-Type: application/java-archive" \
  -H "X-Filename: example.jar" \
  --data-binary "@example.jar"

Multipart upload

curl -X POST "https://api.jarscanner.org/v1/scan" \
  -H "Authorization: Bearer jsk_live_YOUR_KEY" \
  -F "file=@example.jar"

Response shape

{
  "verdict": "suspicious",
  "risk_score": 50,
  "sha256": "...",
  "malware_families": [],
  "obfuscators": [],
  "findings": [],
  "network_indicators": [],
  "usage": {
    "scans_used": 4,
    "scans_remaining": 196
  }
}
ACCOUNT

Usage and access

Your key is sent only to the Jarscanner API and is kept in this page's memory.