INDIVIDUAL MCP TOOL

recover_key

Recover access: emails a one-time link to your on-file address to issue a NEW API key.

vulny.appnone authenticationAvailability not checked

LIVE ENDPOINT

https://agent-api.vulny.app/mcp

No auth detected

Connect to this endpoint to inspect the live schema for recover_key and invoke it with your own arguments.

{}

Inferred read-only · medium confidence · heuristic, not a guarantee.

CONNECT WITH APPROVAL

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.vulny-agent-scan]
url = "https://agent-api.vulny.app/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "vulny-agent-scan": {
      "type": "http",
      "url": "https://agent-api.vulny.app/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: vulny-agent-scan
Remote MCP URL: https://agent-api.vulny.app/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "vulny-agent-scan": {
      "url": "https://agent-api.vulny.app/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "vulny-agent-scan": {
      "type": "http",
      "url": "https://agent-api.vulny.app/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "vulny-agent-scan",
  "transport": "streamable-http",
  "url": "https://agent-api.vulny.app/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

register — Request a Vulny agent API key by company email.
run_scan — Start a vulnerability scan of a domain or IPv4 you control.
get_scan_status — Poll a scan by scan_id.
get_scan_report — Get the report for a FINISHED scan.
buy_credits — Buy a credit package upfront (1 credit = 1 scan).
get_balance — Show your scan allowance: prepaid credits + verified domains (credit accounts), or subscription plan + target limit (subscription tokens).
export_data — Export all data Vulny holds for this account (profile, scans, payments) as JSON — GDPR data access.
delete_data — Permanently delete this account and ALL its data (scans, findings, payments, API keys) — GDPR erasure.