// docs / mcp

Iseva ye-MCP

Faka i-FixWeb ku-Claude Desktop, Cursor, noma kunoma iyiphi i-client ekhuluma i-Model Context Protocol. I-agent yakho ye-AI ithola ukufinyelela okunama-types ekuskeneni, kuma-findings, nakuma-fix prompts anethempulethi afanayo anika amandla inkinobho ye-Copy fix prompt ku-dashboard.

Dala i-token ye-API

Vakashela /account/api-tokens bese udala i-token ebizwa, isib., claude-desktop. Kopisha inani le-plaintext — liboniswa kanye.

Ama-tokens ama-bearer credentials: noma ubani onale string angafunda ukuskena kwakho futhi aqale okusha. Yigcine njengephasiwedi.

Khomba i-client yakho ye-MCP ku-/api/mcp

Claude Desktop / Cursor / Continue / Zed:

{
  "mcpServers": {
    "fixweb": {
      "transport": "streamable-http",
      "url": "https://fixweb.app/api/mcp",
      "headers": {
        "Authorization": "Bearer fxw_YOUR_TOKEN_HERE"
      }
    }
  }
}

Qalisa kabusha i-client. Iseva ye-fixweb kufanele ivele ohlwini lwayo lwamaseva e-MCP.

Yizame

Buza i-agent yakho izinto ezifana nalezi:

“Bala ukuskena kwami kokugcina okungu-10 kwe-FixWeb.”
“Ngibonise ama-critical findings kuskena kwakamuva kakhulu.”
“Qalisa ukuskena okuthule ku-https://staging.example.com.”
“Ku-finding ngayinye ye-high-severity ku-scan X, bhala ukulungisa.”
“Ingabe kukhona ama-live-threat alerts avulekile kuma-domain ami?”
Thayipha /fixweb-fix ne-finding id ukuze udedele i-remediation prompt enethempulethi ngqo ku-chat.

Amathuluzi

list_scansfunda: Ibuyisa kuze kufike ku-100 ukuskena kwakamuva kakhulu ne-status + izibalo ze-findings. Args: limit?: 1..100.
get_scanfunda: I-scan envelope + isifinyezo se-severity nge-category ngayinye ngokuzenzakalelayo. Setha include_findings=true ukuze uthole umbiko ogcwele (mkhulu kuskena okunomsindo — khetha list_findings + filters). Args: scan_id (uuid), include_findings?: boolean.
list_findingsfunda: Ama-findings ane-pagination kuzo zonke izikena zakho. Args: severity?: list, check_id?, since? (ISO 8601), limit?: 1..200.
start_scanbhala: Enqueues a passive scan. Returns an id with status queued; poll get_scan to await completion. Owner-depth mode is gated behind on-site attestation and not exposed via MCP. Args: target (URL or hostname).
list_alertsfunda: Izexwayiso zezinsongo eziphilayo (umehluko we-CT log, izinguquko ze-DNS, ohlu lwe-threat intel). Itholakala kuphela kuhlelo lwe-Unlimited; izinhlelo ze-Hobby ne-Pro zibuyisela uhlu olungenalutho. Args: domain_id?, active_only?, limit?: 1..200.
get_alertfunda: I-alert eyodwa ene-payload egcwele (DNS diff, new certs, listing detail). Args: alert_id (uuid).
dismiss_alertbhala · idempotent: Maka i-alert njenge-dismissed. Idempotent — ukuyidismiss futhi kuyi-no-op. Args: alert_id (uuid).

Izinsiza

Resources zivumela i-client yakho ukuthi inamathisele idatha ye-FixWeb engxoxweni ngqo, esikhundleni sokuthi i-agent iphinde iyifetch kuzo zonke izikhathi. Ku-Claude Desktop, chofoza imenyu ethi @ → fixweb.

fixweb://scan/{scan_id}/reportjson: Umbiko ophelele wokuskena kwe-FixWeb ohlanganisa wonke ama-check nawo wonke ama-findings.
fixweb://finding/{finding_id}json: I-finding eyodwa (severity, title, description, evidence, remediation, CWE).

Imiyalo ye-slash

/fixweb-fixprompt: Irenda i-remediation prompt enethempulethi ye-finding. Ithola i-codebase framework ku-tech-fingerprint yeskeni bese ifaka iseluleko esiqondene ne-framework uma sitholakala; uma kungenjalo ibuyela kuresiphi ejwayelekile. Args: finding_id (uuid). Akukho Claude API call — itemplatwe ku-server-side.

→ Ama-quota, RLS, ne-severity gating asebenza ngokufanayo kuma-call e-MCP nawe-REST.