FixWeb

// docs / mcp

MCP server

FixWeb gara Claude Desktop, Cursor, ykn client Model Context Protocol dubbatu kamiyyuu keessa galchi. AI agent kee sakatta'iinsota, argannoowwan, fi prompts sirreessaa qophaa'an kan dashboard irratti Copy fix prompt humneessan garaagarummaa type qabuun argata.

01

API token uumi

Gara /account/api-tokens deemiitii token maqaa fakkeenyaaf claude-desktop jedhu uumi. Gatii plaintext garagalchi; si'a tokko qofa mul'ata.

Tokens bearer credentials dha: namni string sana qabu scans kee dubbisuu fi haaraa jalqabuu danda'a. Akka passworditti kuusi.

02

MCP client kee gara /api/mcp akeeki

Claude Desktop / Cursor / Continue / Zed:

{
  "mcpServers": {
    "fixweb": {
      "transport": "streamable-http",
      "url": "https://fixweb.app/api/mcp",
      "headers": {
        "Authorization": "Bearer fxw_YOUR_TOKEN_HERE"
      }
    }
  }
}

Client irra-deebi'ii jalqabi. Server fixweb tarree MCP server isaa keessatti mul'achuu qaba.

03

Yaali

Agent kee wantoota akkana jedhu gaafadhu:

  • “Sakatta'iinsota FixWeb koo dhumaa 10 tarreessi.”
  • “Scan isa haaraa irratti argannoowwan critical natti agarsiisi.”
  • https://staging.example.com irratti passive scan jalqabi.”
  • “Argannoo severity ol'aanaa scan X irratti hundaaf sirreeffama barreessi.”
  • “Domeenota koo irratti alerts live-threat banaa jiraa?”
  • Finding id waliin /fixweb-fix barreessi, prompt sirreessaa qophaa'e kallattiin gara chat keessa akka bu'uuf.

Meeshaalee

list_scansdubbisi
Scans haaraa hanga 100 status + lakkoofsa argannoo waliin deebisa. Args: limit?: 1..100.
get_scandubbisi
Scan envelope + cuunfaa severity per-category default dhaan. include_findings=true godhi gabaasa guutuuf (scan sagalee qabuuf guddaa; list_findings + filters filadhu). Args: scan_id (uuid), include_findings?: boolean.
list_findingsdubbisi
Argannoowwan scans kee hunda keessatti paginated. Args: severity?: list, check_id?, since? (ISO 8601), limit?: 1..200.
start_scanbarreessi
Enqueues a passive scan. Returns an id with status queued; poll get_scan to await completion. Owner-depth mode is gated behind on-site attestation and not exposed via MCP. Args: target (URL or hostname).
list_alertsdubbisi
Akeekkachiisa balaa kallattii (garaagarummaa CT log, jijjiirama DNS, tarree threat intel). Karoora Unlimited qofa irratti argama; karoorawwan Hobby fi Pro tarree duwwaa deebisu. Args: domain_id?, active_only?, limit?: 1..200.
get_alertdubbisi
Alert tokko payload guutuu waliin (DNS diff, certs haaraa, detail listing). Args: alert_id (uuid).
dismiss_alertbarreessi · idempotent
Alert dismissed godhi. Idempotent dha; irra-deebiin dismiss gochuun no-op. Args: alert_id (uuid).

Qabeenya

Resources client kee deetaa FixWeb kallattiin gara haasaa keessatti akka maxxansu godhu, agent yeroo hundumaa deebisee fetch gochuu osoo hin barbaachisin. Claude Desktop keessatti @ menu → fixweb cuqaasi.

fixweb://scan/{scan_id}/reportjson
Gabaasa scan FixWeb guutuu checks hunda fi argannoo hunda of keessaa qabu.
fixweb://finding/{finding_id}json
Argannoo tokko (severity, title, description, evidence, remediation, CWE).

Slash commands

/fixweb-fixprompt
Finding tokkoof prompt sirreessaa qophaa'e render godha. Framework codebase scan tech-fingerprint irraa adda baasa, yoo argame gorsa framework-specific galcha; yoo hin jirre gara recipe generic deebi'a. Args: finding_id (uuid). Waamichi Claude API hin jiru; server-side templated.

→ Quotas, RLS, fi severity gating waamicha MCP fi REST irratti walqixa hojiirra oolu.

MCP server — Docs · FixWeb