// docs / quickstart

Tekivu totolo

Saini, vakayacora nomu scan imatai, wilika na ripote. E dina na Free tier — sega ni gadrevi na credit card mo dikeva.

Sikova na /sign-in ka digia na Google, GitHub se imeli ena magic link. Na ivolatusi vou e tekivu ena palani Free, e wili kina e 3 na vakaraici ena vula kei na vakaraici passive ga. O rawa ni vakavinakataka ena gauna mai muri mai na iVolatusi → iSau.

2. Vakayacora e dua na scan

Digitaka e dua na target

Mai na dashboard kiliki New scan, paste e dua na URL, ka submit. E normalise o FixWeb na bare hostnames (example.com → https://example.com) ka reject internal addresses (RFC 1918, link-local, AWS metadata).

Waraka ~20 sekodi

A passive scan runs in three phases: crawl (Chromium renders the page to discover links, metadata, media, scripts, and forms), quality checks (crawlability, search presentation, content/schema, media, performance, accessibility, forms, mobile/i18n, and runtime signals), and aggregate (deduplicate + severity ranking). Live progress streams via the dashboard; you don't need to refresh.

Wilika na ripote

The report opens automatically when complete. Free plan users see only the highest-severity finding in full (title, description, evidence, remediation); other findings are stripped to severity-only stubs server-side. The Hobby plan and higher (Pro, Unlimited) unlock every finding plus the AI prompt copy button on each one.

3. Run an owner-depth scan (optional, Hobby plan and higher)

Owner-depth scans extend the same website-quality checks into verified domains and can include private journeys when you provide a short-lived test-account header. Add and verify a domain at Dashboard -> Domains (DNS TXT or HTTP file), then start an Owner-depth scan from New scan. You'll attest to the scan; we audit-log it server-side.

4. Vakayagataka na REST API

Mint e dua na bearer token ena Account → API tokens. E vakaraitaki vakadua na plaintext; paste ki nomu CI / Cursor / curl.

curl

# Start a passive scan
curl -X POST https://fixweb.app/api/v1/scans \
  -H "Authorization: Bearer fxw_..." \
  -H "content-type: application/json" \
  -d '{"target":"https://staging.example.com"}'

Full reference ena /docs/api.

5. Semata FixWeb ki nomu AI agent (MCP)

E ship o FixWeb e dua na MCP server ena /api/mcp kei na tools e vitu, resources e rua, kei na /fixweb-fix slash command me baleta na templated remediation prompts. Wire ki Claude Desktop / Cursor / Continue — raica /docs/mcp.

Na vanua mo gole tarava

Scan types — passive vs owner-depth vs GitHub repo scans, the attestation flow.
Domains — verify a domain, schedule re-scans, enable live monitoring.
Quotas & limits — caps ni tier yadua, API rate limits, retention policies.

Sa tao?

Vakauta e dua na imeli vei support@fixweb.app ena id ni vakaraici kei na ka o nuitaki ka vakatautauvatataki kei na ka o raica. Na palani Hobby e ciqoma na veivuke ni iyaya, na palani Pro e ciqoma na veivuke liu, ka na palani Unlimited e wili kina na veivuke ka tabaki tu.

1. Bulia e dua na account