Security & Testing

aquilax.ai

Provides security scanning for code repositories and snippets using static analysis.

1 endpoint12 known toolsFirst detected July 24, 2026Last detected September 4, 2026

ENDPOINT 1

https://mcp.aquilax.ai/mcp

No auth detected

MCP server metadata

Name: aquilax
Version: 1.0.0

Capabilities

tools.listChanged

Known tools 12

list_organizations

Lists the organizations the authenticated user belongs to (names and IDs).

Inferred read-only

list_groups

Lists the groups within an organization (names and IDs).

Inferred read-only

start_scan

Triggers a full security scan on a Git repository using the Aquilax static analysis engine.

Inferred read-only

get_scan_status

Returns the current status and progress of a repository scan previously started with start_scan.

Inferred read-only

scan_code

Scans a code snippet or file content for security vulnerabilities using Aquilax static analysis.

Inferred read-only

list_vulnerabilities

Returns all security vulnerability findings stored in Aquilax for an organization and group.

Inferred read-only

fix_vulnerability

Generates a secure, minimal replacement for a known vulnerable code snippet using Aquilax AI.

Inferred read-only

get_security_summary

Returns a compact, pre-aggregated security posture summary for the configured organization and group: project count, scans run, lines/files scanned, total vulnerabilities broken down by status (True Positive / False Positive / Unverified / Not Exploitable), true/false-positive rates, a severity breakdown (Critical/High/Medium/Low), and a per-scanner breakdown — for both the current state and 30 days ago.

Inferred read-only

get_scan_report

Returns a compact report for a SINGLE scan: repository and commit metadata, lines/files scanned, execution stats, a short "about the codebase" summary when available, and the scan's findings aggregated by severity, scanner, status, and CWE (False Positive and Not Exploitable findings excluded).

Inferred read-only

get_account_context

Returns the authenticated user's workspace context as a ready-to-read markdown brief: their name/email/ID, recent notifications, the CURRENT organization (name, id, plan, the user's role) and CURRENT group (name, id, security policy), plus the lists of organizations, groups, org members, and scanned projects, and handy dashboard links.

Potential side effects

list_projects

Lists the projects (repositories) in the configured organization and group — name, id, Git URL, and default branch.

Inferred read-only

search_docs

Searches the AQUILAX PRODUCT documentation and FAQ knowledge base (about the Aquilax platform itself) and returns the most relevant passages.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.aquilax]
url = "https://mcp.aquilax.ai/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "aquilax": {
      "type": "http",
      "url": "https://mcp.aquilax.ai/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: aquilax
Remote MCP URL: https://mcp.aquilax.ai/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "aquilax": {
      "url": "https://mcp.aquilax.ai/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "aquilax": {
      "type": "http",
      "url": "https://mcp.aquilax.ai/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "aquilax",
  "transport": "streamable-http",
  "url": "https://mcp.aquilax.ai/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for aquilax.ai was fetched 2026-07-25T04:48:05.784Z and is being refreshed.

Trust status Trusted

aquilax.ai is assessed as Trusted: Domain has an established technology history spanning over a year.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.