INDIVIDUAL MCP TOOL

get_fix_guidance

Get detailed, step-by-step remediation guidance for a specific vulnerability or security issue (e.

scanlabsai.comnone authenticationAvailability not checked

LIVE ENDPOINT

https://scanlabsai.com/api/mcp

No auth detected

Connect to this endpoint to inspect the live schema for get_fix_guidance and invoke it with your own arguments.

{}

Inferred read-only · medium confidence · heuristic, not a guarantee.

No write-capable action terms were found; this is not proof that invocation has no side effects.

CONNECT WITH APPROVAL

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.scanlabsai]
url = "https://scanlabsai.com/api/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "scanlabsai": {
      "type": "http",
      "url": "https://scanlabsai.com/api/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: scanlabsai
Remote MCP URL: https://scanlabsai.com/api/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "scanlabsai": {
      "url": "https://scanlabsai.com/api/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "scanlabsai": {
      "type": "http",
      "url": "https://scanlabsai.com/api/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "scanlabsai",
  "transport": "streamable-http",
  "url": "https://scanlabsai.com/api/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

scan_website — Run a ScanLabsAI security scan against a website and return a full Markdown vulnerability report (grouped by severity, with descriptions and remediation) that you can analyse, act on, and the user can save as security-report.
scan_agent — Red-team an AI agent for security weaknesses — prompt injection, system-prompt leakage, sensitive-data disclosure, unsafe output handling and excessive agency — mapped to the OWASP LLM Top 10, and return a Markdown report.
compliance_report — Generate a website compliance report — the same automated assessment the ScanLabsAI agency portal runs — covering GDPR/CCPA privacy, WCAG 2.
lookup_cves — Look up recent CVEs from the NIST NVD feed, optionally filtered by keyword.
get_pricing — Get ScanLabsAI pricing: the free-first-scan policy and AI credit packs.
check_credits — Check the signed-in account's AI credit balance.
buy_credits — Get a secure Stripe checkout link to buy an AI credit pack for the signed-in account.