FixWeb

// docs / mcp

MCP server

FixWeb ናብ Claude Desktop, Cursor, ወይ ናብ ዝኾነ Model Context Protocol ዝዛረብ client ኣብጽሖ። AI agentካ ናብ scansካ፣ findingsካ፣ ከምኡውን እቶም ኣብ dashboard Copy fix prompt ዘስርሑ templated fix prompts ብ type ዝተወሰነ መእተዊ ይረክብ።

01

API token ፍጠር

ናብ /account/api-tokens ኪድ፣ ንኣብነት claude-desktop ዝብል token ፍጠር። Plaintext value ቅዳሕ፤ ሓንሳብ ጥራይ ይርአ።

Tokens bearer credentials እዮም: እቲ string ዘለዎ ሰብ scansካ ከንብብን ሓደሽቲ ከበግስን ይኽእል። ከም password ዕቀቦ።

02

MCP clientካ ናብ /api/mcp ኣመልክት

Claude Desktop / Cursor / Continue / Zed:

{
  "mcpServers": {
    "fixweb": {
      "transport": "streamable-http",
      "url": "https://fixweb.app/api/mcp",
      "headers": {
        "Authorization": "Bearer fxw_YOUR_TOKEN_HERE"
      }
    }
  }
}

Client እንደገና ጀምር። fixweb server ኣብ MCP server list ክርአ ኣለዎ።

03

ፈትኖ

Agentካ ከምዚ ዝብሉ ነገራት ሕተቶ:

  • “ናይ መወዳእታ 10 FixWeb scans ዘርዝርለይ።”
  • “ኣብ ዝሓደሰ scan ዘለዉ critical findings ኣርእየኒ።”
  • “ኣብ https://staging.example.com passive scan ጀምር።”
  • “ንነፍሲ ወከፍ high-severity finding ኣብ scan X መፍትሒ ጽሓፍ።”
  • “ኣብ domainsይ open live-threat alerts ኣለዉዶ?”
  • Finding id ምስ /fixweb-fix ጽሓፍ፣ templated remediation prompt ቀጥታ ናብ chat ክወድቕ።

መሳርሒታት

list_scansኣንብብ
ክሳብ 100 ዝሓደሱ scans ምስ status + finding counts ይመልስ። Args: limit?: 1..100።
get_scanኣንብብ
ብ default scan envelope + per-category severity summary። include_findings=true ንምሉእ report ኣቐምጥ (ን noisy scans ዓቢ እዩ፤ list_findings + filters ምረጽ)። Args: scan_id (uuid), include_findings?: boolean።
list_findingsኣንብብ
Paginated findings ኣብ ኩሉ scansካ። Args: severity?: list, check_id?, since? (ISO 8601), limit?: 1..200።
start_scanጽሓፍ
Enqueues a passive scan. Returns an id with status queued; poll get_scan to await completion. Owner-depth mode is gated behind on-site attestation and not exposed via MCP. Args: target (URL or hostname).
list_alertsኣንብብ
ናይ ብቐጥታ ሓደጋ መንቅሕታት (ናይ CT log ፍልልያት፣ ናይ DNS ለውጥታት፣ ናይ threat intel ዝርዝራት)። ኣብ Unlimited ፕላን ጥራይ ይርከብ፤ ናይ Hobby ከምኡውን Pro ፕላናት ባዶ ዝርዝር ይምልሱ። Args: domain_id?, active_only?, limit?: 1..200.
get_alertኣንብብ
ሓደ alert ምስ ምሉእ payload (DNS diff, new certs, listing detail)። Args: alert_id (uuid)።
dismiss_alertጽሓፍ · idempotent
Alert dismissed ምልክት ግበር። Idempotent እዩ፤ እንደገና dismiss ምግባር no-op እዩ። Args: alert_id (uuid)።

Resources

Resources clientካ FixWeb data ቀጥታ ናብ ዝርርብ ከተሓሕዝ የኽእሉ፣ agent ኣብ ነፍሲ ወከፍ turn እንደገና fetch ክገብር ኣየድልን። ኣብ Claude Desktop፣ @ menu → fixweb ጠውቕ።

fixweb://scan/{scan_id}/reportjson
ምሉእ FixWeb scan report ኩሉ check ን ኩሉ finding ዘጠቓልል።
fixweb://finding/{finding_id}json
ሓደ finding (severity, title, description, evidence, remediation, CWE)።

Slash commands

/fixweb-fixprompt
ን finding ሓደ templated remediation prompt ይrender ይገብር። Framework ናይ codebase ካብ scan tech-fingerprint ይፈልጥ፣ እንተተረኺቡ framework-specific advice የእቱ፤ ካልእ ናብ generic recipe ይምለስ። Args: finding_id (uuid)። Claude API call የለን፤ server-side templated።

→ Quotas, RLS, ን severity gating ኣብ MCP ን REST calls ተመሳሳሊ ይትግበሩ።

MCP server — Docs · FixWeb