// docs / mcp

MCP server

Ampidiro ao amin’i Claude Desktop, Cursor, na client rehetra mahay Model Context Protocol i FixWeb. Mahazo fidirana typed amin’ny scans, findings, ary ireo fix prompts misy lasitra mitovy amin’ny bokotra Copy fix prompt ao amin’ny dashboard ny AI agent-nao.

Mamoròna API token

Tsidiho ny /account/api-tokens ary mamoròna token antsoina, ohatra, hoe claude-desktop. Adikao ny sandan’ny plaintext; aseho indray mandeha izy.

Bearer credentials ny tokens: izay manana ilay string dia afaka mamaky ny scans-nao sy manomboka vaovao. Tehirizo toy ny password.

Atoroy ny client MCP-nao mankany /api/mcp

Claude Desktop / Cursor / Continue / Zed:

{
  "mcpServers": {
    "fixweb": {
      "transport": "streamable-http",
      "url": "https://fixweb.app/api/mcp",
      "headers": {
        "Authorization": "Bearer fxw_YOUR_TOKEN_HERE"
      }
    }
  }
}

Avereno alefa ny client. Tokony hiseho ao amin’ny lisitry ny MCP server-ny ny server fixweb.

Andramo

Anontanio ny agent-nao zavatra toy izao:

“Tanisao ny scan FixWeb 10 farany nataoko.”
“Asehoy ahy ny findings critical amin’ny scan farany indrindra.”
“Atombohy scan passive amin’ny https://staging.example.com.”
“Ho an’ny finding high-severity tsirairay amin’ny scan X, manorata fanamboarana.”
“Misy alert fandrahonana mivantana mbola misokatra amin’ny domains-ko ve?”
Soraty /fixweb-fix miaraka amin’ny finding id hampidina avy hatrany ao amin’ny chat ny remediation prompt misy lasitra.

Fitaovana

list_scansmamaky: Mamerina hatramin’ny 100 scan farany indrindra miaraka amin’ny status + isan’ny findings. Args: limit?: 1..100.
get_scanmamaky: Scan envelope + famintinana severity isaky ny category amin’ny default. Apetraho include_findings=true ho an’ny tatitra feno (lehibe amin’ny scan be tabataba; aleo list_findings + filters). Args: scan_id (uuid), include_findings?: boolean.
list_findingsmamaky: Findings misy pagination manerana ny scans-nao rehetra. Args: severity?: list, check_id?, since? (ISO 8601), limit?: 1..200.
start_scanmanoratra: Enqueues a passive scan. Returns an id with status queued; poll get_scan to await completion. Owner-depth mode is gated behind on-site attestation and not exposed via MCP. Args: target (URL or hostname).
list_alertsmamaky: Fampandrenesana mivantana momba ny loza (fahasamihafan'ny CT log, fiovan'ny DNS, lisitra threat intel). Misy ihany amin'ny drafitra Unlimited; ny drafitra Hobby sy Pro dia mamerina lisitra foana. Args: domain_id?, active_only?, limit?: 1..200.
get_alertmamaky: Alert tokana misy payload feno (DNS diff, certs vaovao, antsipirian’ny listing). Args: alert_id (uuid).
dismiss_alertmanoratra · idempotent: Mariho ho dismissed ny alert. Idempotent: raha averina dia tsy misy vokany. Args: alert_id (uuid).

Loharano

Ny resources dia mamela ny client-nao hampiditra data FixWeb mivantana ao amin’ny resaka, fa tsy ny agent no maka azy indray isaky ny turn. Ao amin’i Claude Desktop, tsindrio ny menu @ → fixweb.

fixweb://scan/{scan_id}/reportjson: Tatitra scan FixWeb feno, ahitana check rehetra sy finding rehetra.
fixweb://finding/{finding_id}json: Finding tokana (severity, lohateny, famaritana, evidence, remediation, CWE).

Baiko slash

/fixweb-fixprompt: Mandrender remediation prompt misy lasitra ho an’ny finding iray. Mamantatra ny framework an’ny codebase avy amin’ny tech-fingerprint an’ilay scan ary mampiditra torohevitra manokana isaky ny framework raha misy; raha tsy izany dia miverina amin’ny recipe ankapobeny. Args: finding_id (uuid). Tsy misy antso Claude API; templated server-side.

→ Mihatra mitovy amin’ny antso MCP sy REST ny quotas, RLS, ary severity gating.