ScanLabsAI Security Scanner
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
Connect it
Settings → Connectors → Add custom connector
URL: https://scanlabsai.com/api/mcpSettings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://scanlabsai.com/api/mcp{
"mcpServers": {
"scanner": {
"url": "https://scanlabsai.com/api/mcp"
}
}
}claude mcp add --transport http scanner https://scanlabsai.com/api/mcp{
"servers": {
"scanner": {
"type": "http",
"url": "https://scanlabsai.com/api/mcp"
}
}
}{
"mcpServers": {
"scanner": {
"command": "npx",
"args": [
"-y",
"@scanlabsai/mcp-server@1.0.0"
],
"env": {
"SCANLABS_API_KEY": "<value>"
}
}
}
}claude mcp add scanner -- npx -y @scanlabsai/mcp-server@1.0.08 tools, verified live
scan_websiteRun a ScanLabsAI security scan against a website and return a full Markdown vulnerability report (grouped by severity, with descriptions and remediation) that you can analyse, act on, and the user can save as security-report.md. Checks OWASP Top 10, CVEs, SSL/TLS, security headers and DNS. Use deep=true for a comprehensive scan (40,000+ vectors, slower). Only scan sites the user is authorised to t
scan_agentRed-team an AI agent for security weaknesses — prompt injection, system-prompt leakage, sensitive-data disclosure, unsafe output handling and excessive agency — mapped to the OWASP LLM Top 10, and return a Markdown report. This is agent-to-agent scanning: use it to assess another agent from here. Two target kinds are supported: kind="openai" for an OpenAI-compatible chat-completions endpoint, or k
compliance_reportGenerate a website compliance report — the same automated assessment the ScanLabsAI agency portal runs — covering GDPR/CCPA privacy, WCAG 2.1 AA accessibility, PCI DSS 4.0 payment security and general standards. Returns an overall score, per-category scores and the failing/at-risk checks with recommendations, as Markdown. Requires a ScanLabsAI API key in the connection; costs 1 AI credit per repor
get_fix_guidanceGet detailed, step-by-step remediation guidance for a specific vulnerability or security issue (e.g. "missing Content-Security-Policy header", "SQL injection", a CVE id). Returns actionable fixes.
lookup_cvesLook up recent CVEs from the NIST NVD feed, optionally filtered by keyword. Returns id, severity, score and summary.
get_pricingGet ScanLabsAI pricing: the free-first-scan policy and AI credit packs.
check_creditsCheck the signed-in account's AI credit balance. Requires a ScanLabsAI API key in the MCP connection (Authorization: Bearer slai_...). Create one at https://scanlabsai.com/mcp.
buy_creditsGet a secure Stripe checkout link to buy an AI credit pack for the signed-in account. Requires a ScanLabsAI API key in the MCP connection. Credits are added automatically once payment completes. Packs: starter (5), pro (15), agency (50).
Alternatives in Security
Compare →
QuizBaseB
MCP server for trivia: 1.4M+ questions (EN+PL), 24 categories, 12 tools + 4 prompts, OAuth 2.1.
HSHelixar SecurityB
Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.
PTPentest ToolsB
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
SkycloakB
Managed Keycloak from any MCP client: clusters, realms, apps, SSO, users, domains, audit events.
Tektolo Rental PropertyB
Rental property tools for agents: turnover cost estimates and security deposit rules by US state.
TRTrentB
Security reviews, threat models over a repo or website, and remediation tracking, in your editor.