Security & Testing

scanlabsai.com

Provides security scanning, vulnerability assessment, compliance reporting, and CVE lookup services.

1 endpoint8 known toolsFirst detected August 8, 2026Last detected August 8, 2026

ENDPOINT 1

https://scanlabsai.com/api/mcp

No auth detected

MCP server metadata

Name: scanlabsai
Version: 1.0.0

Capabilities

tools

Server instructions

ScanLabsAI security scanner. Use scan_website to assess a website, scan_agent to red-team another AI agent or MCP server (agent-to-agent scanning, OWASP LLM Top 10), compliance_report to generate a GDPR/WCAG/PCI compliance report (1 credit), get_fix_guidance to remediate findings, lookup_cves for vulnerability intelligence, check_credits for the balance, and buy_credits for a top-up link. The first scan of every website is free; further website scans, agent scans and compliance reports use AI credits from the account tied to the API key in this connection (create one at https://scanlabsai.com/mcp). Only scan targets you are authorised to test.

Known tools 8

scan_website

Run a ScanLabsAI security scan against a website and return a full Markdown vulnerability report (grouped by severity, with descriptions and remediation) that you can analyse, act on, and the user can save as security-report.

Inferred read-only

scan_agent

Red-team an AI agent for security weaknesses — prompt injection, system-prompt leakage, sensitive-data disclosure, unsafe output handling and excessive agency — mapped to the OWASP LLM Top 10, and return a Markdown report.

Inferred read-only

compliance_report

Generate a website compliance report — the same automated assessment the ScanLabsAI agency portal runs — covering GDPR/CCPA privacy, WCAG 2.

Inferred read-only

get_fix_guidance

Get detailed, step-by-step remediation guidance for a specific vulnerability or security issue (e.

Inferred read-only

lookup_cves

Look up recent CVEs from the NIST NVD feed, optionally filtered by keyword.

Inferred read-only

get_pricing

Get ScanLabsAI pricing: the free-first-scan policy and AI credit packs.

Inferred read-only

check_credits

Check the signed-in account's AI credit balance.

Inferred read-only

buy_credits

Get a secure Stripe checkout link to buy an AI credit pack for the signed-in account.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.scanlabsai]
url = "https://scanlabsai.com/api/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "scanlabsai": {
      "type": "http",
      "url": "https://scanlabsai.com/api/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: scanlabsai
Remote MCP URL: https://scanlabsai.com/api/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "scanlabsai": {
      "url": "https://scanlabsai.com/api/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "scanlabsai": {
      "type": "http",
      "url": "https://scanlabsai.com/api/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "scanlabsai",
  "transport": "streamable-http",
  "url": "https://scanlabsai.com/api/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.