FixVibe

// docs / mcp

MCP sirwiri

Plug FixVibe into Claude Desktop, Cursor, jan ukax any client that speaks uka Model Context Protocol. Your AI agent gets typed access ru ma scannaka, jikxatawinaka, ukat uka same templated fix prompts that power uka dashboard's Apaqaña fix prompt button.

01

Mint an API token

Visit /cuenta/api-tokens ukat create a token named, e.g., claude-desktop. Apaqaña uka plaintext value — it's shown once.

Tokens pxiwa bearer credentials: anyone ukampi uka string spawa read ma scannaka ukat start machaq ones. Store it like a password.

02

Point ma MCP client at /api/mcp

Claude Desktop / Cursor / Continue / Zed:

{
  "mcpServers": {
    "fixvibe": {
      "transport": "streamable-http",
      "url": "https://fixvibe.app/api/mcp",
      "headers": {
        "Authorization": "Bearer fxv_YOUR_TOKEN_HERE"
      }
    }
  }
}

Restart uka client. The fixvibe server should appear in its MCP sirwiri list.

03

Try it out

Ask ma agent things like:

  • “List my last 10 FixVibe scannaka.”
  • “Show me uka critical jikxatawinaka on uka most recent scan.”
  • “Start a passive scan against https://staging.example.com.”
  • “For each high-severity jikxatawi on scan X, write a fix.”
  • “Are there any open live-threat alertanaka on my dominiona?”
  • Type /fixvibe-fix ukampi a jikxatawi id ru drop uka templated remediation prompt straight into uka chat.

Yänaka

list_scansread
Returns up ru 100 most-recent scannaka ukampi status + jikxatawi counts. Args: limit?: 1..100.
get_scanread
Scan envelope + per-category severity summary by default. Set include_findings=true tak uka full yatiyaw (large tak noisy scannaka — prefer list_findings + filters). Args: scan_id (uuid), include_findings?: boolean.
list_findingsread
Paginated jikxatawinaka across all ma scannaka. Args: severity?: list, check_id?, since? (ISO 8601), limit?: 1..200.
start_scanwrite
Enqueues a scan and returns an id with status queued; poll get_scan to await completion. Passive mode is always available through MCP. Active mode requires a paid plan plus verified-domain authorization from the dashboard. Args: target (URL or hostname), mode? (passive|active).
list_alertsread
Live amenaza alertanaka (CT log mayjaña, DNS muytayañ, threat intel listas). Unlimited planallanx jikxatas; Hobby ukat Pro planax ch'usa lista kuttʼayi. Args: domain_id?, active_only?, limit?: 1..200.
get_alertread
Single alert with the relevant domain, severity, type, and event details. Args: alert_id (uuid).
dismiss_alertwrite · idempotent
Mark an alerta dismissed. Idempotent — re-dismissing wa a janiwa-op. Args: alert_id (uuid).

Recursos

Recursos let ma client attach FixVibe yatiyawi into uka conversation directly, instead of uka agent re-fetching it on sapa turn. In Claude Desktop, click uka @ menu → fixvibe.

fixvibe://scan/{scan_id}/reportjson
Full FixVibe scan yatiyaw including sapa check ukat sapa jikxatawi.
fixvibe://finding/{finding_id}json
A single jikxatawi (severity, title, description, evidence, remediation, CWE).

Slash commands

/fixvibe-fixprompt
Renders a server-side remediation prompt for a finding, using scan context when available and falling back to generic guidance otherwise. Args: finding_id (uuid). No third-party LLM API call is made by FixVibe.

→ Quotas, RLS, ukat severity gating apply identically ru MCP ukat REST calls.

MCP sirwiri — Docs · FixVibe