// docs / mcp
MCP server
FixWeb gara Claude Desktop, Cursor, ykn client Model Context Protocol dubbatu kamiyyuu keessa galchi. AI agent kee sakatta'iinsota, argannoowwan, fi prompts sirreessaa qophaa'an kan dashboard irratti Copy fix prompt humneessan garaagarummaa type qabuun argata.
API token uumi
Gara /account/api-tokens deemiitii token maqaa fakkeenyaaf claude-desktop jedhu uumi. Gatii plaintext garagalchi; si'a tokko qofa mul'ata.
Tokens bearer credentials dha: namni string sana qabu scans kee dubbisuu fi haaraa jalqabuu danda'a. Akka passworditti kuusi.
MCP client kee gara /api/mcp akeeki
Claude Desktop / Cursor / Continue / Zed:
{
"mcpServers": {
"fixweb": {
"transport": "streamable-http",
"url": "https://fixweb.app/api/mcp",
"headers": {
"Authorization": "Bearer fxw_YOUR_TOKEN_HERE"
}
}
}
}Client irra-deebi'ii jalqabi. Server fixweb tarree MCP server isaa keessatti mul'achuu qaba.
Yaali
Agent kee wantoota akkana jedhu gaafadhu:
- “Sakatta'iinsota FixWeb koo dhumaa 10 tarreessi.”
- “Scan isa haaraa irratti argannoowwan critical natti agarsiisi.”
- “
https://staging.example.comirratti passive scan jalqabi.” - “Argannoo severity ol'aanaa scan X irratti hundaaf sirreeffama barreessi.”
- “Domeenota koo irratti alerts live-threat banaa jiraa?”
- Finding id waliin
/fixweb-fixbarreessi, prompt sirreessaa qophaa'e kallattiin gara chat keessa akka bu'uuf.
Meeshaalee
- list_scansdubbisi
- Scans haaraa hanga 100 status + lakkoofsa argannoo waliin deebisa. Args: limit?: 1..100.
- get_scandubbisi
- Scan envelope + cuunfaa severity per-category default dhaan. include_findings=true godhi gabaasa guutuuf (scan sagalee qabuuf guddaa; list_findings + filters filadhu). Args: scan_id (uuid), include_findings?: boolean.
- list_findingsdubbisi
- Argannoowwan scans kee hunda keessatti paginated. Args: severity?: list, check_id?, since? (ISO 8601), limit?: 1..200.
- start_scanbarreessi
- Enqueues a passive scan. Returns an id with status queued; poll get_scan to await completion. Owner-depth mode is gated behind on-site attestation and not exposed via MCP. Args: target (URL or hostname).
- list_alertsdubbisi
- Akeekkachiisa balaa kallattii (garaagarummaa CT log, jijjiirama DNS, tarree threat intel). Karoora Unlimited qofa irratti argama; karoorawwan Hobby fi Pro tarree duwwaa deebisu. Args: domain_id?, active_only?, limit?: 1..200.
- get_alertdubbisi
- Alert tokko payload guutuu waliin (DNS diff, certs haaraa, detail listing). Args: alert_id (uuid).
- dismiss_alertbarreessi · idempotent
- Alert dismissed godhi. Idempotent dha; irra-deebiin dismiss gochuun no-op. Args: alert_id (uuid).
Qabeenya
Resources client kee deetaa FixWeb kallattiin gara haasaa keessatti akka maxxansu godhu, agent yeroo hundumaa deebisee fetch gochuu osoo hin barbaachisin. Claude Desktop keessatti @ menu → fixweb cuqaasi.
- fixweb://scan/{scan_id}/reportjson
- Gabaasa scan FixWeb guutuu checks hunda fi argannoo hunda of keessaa qabu.
- fixweb://finding/{finding_id}json
- Argannoo tokko (severity, title, description, evidence, remediation, CWE).
Slash commands
- /fixweb-fixprompt
- Finding tokkoof prompt sirreessaa qophaa'e render godha. Framework codebase scan tech-fingerprint irraa adda baasa, yoo argame gorsa framework-specific galcha; yoo hin jirre gara recipe generic deebi'a. Args: finding_id (uuid). Waamichi Claude API hin jiru; server-side templated.
→ Quotas, RLS, fi severity gating waamicha MCP fi REST irratti walqixa hojiirra oolu.
