FixVibe

// docs / mcp

MCP server

Uključite FixVibe u Claude Desktop, Cursor ili bilo koji client koji govori Model Context Protocol. Vaš AI agent dobija tipiziran pristup vašim scans, findings i istim templated fix prompts koji pokreću dashboard dugme Copy fix prompt.

01

Izdajte API token

Posjetite /account/api-tokens i kreirajte token nazvan, npr., claude-desktop. Kopirajte plaintext value — prikazuje se jednom.

Tokens su bearer credentials: svako sa string može čitati vaše scans i pokretati nove. Čuvajte ga kao password.

02

Usmjerite MCP client na /api/mcp

Claude Desktop / Cursor / Continue / Zed:

{
  "mcpServers": {
    "fixvibe": {
      "transport": "streamable-http",
      "url": "https://fixvibe.app/api/mcp",
      "headers": {
        "Authorization": "Bearer fxv_YOUR_TOKEN_HERE"
      }
    }
  }
}

Restartujte client. Server fixvibe treba se pojaviti u njegovoj MCP server list.

03

Isprobajte

Pitajte agent stvari poput:

  • “Prikaži mojih zadnjih 10 FixVibe scans.”
  • “Pokaži mi critical findings na najnovijem scan.”
  • “Pokreni passive scan protiv https://staging.example.com.”
  • “Za svaki high-severity finding na scan X napiši fix.”
  • “Ima li otvorenih live-threat alerts na mojim domains?”
  • Upišite /fixvibe-fix s finding id da drop templated remediation prompt direktno u chat.

Tools

list_scansčitanje
Vraća do 100 most-recent scans sa status + finding counts. Args: limit?: 1..100.
get_scančitanje
Scan envelope + per-category severity summary by default. Set include_findings=true za full report (large for noisy scans — prefer list_findings + filters). Args: scan_id (uuid), include_findings?: boolean.
list_findingsčitanje
Paginated findings kroz sve vaše scans. Args: severity?: list, check_id?, since? (ISO 8601), limit?: 1..200.
start_scanpisanje
Enqueues a scan and returns an id with status queued; poll get_scan to await completion. Passive mode is always available through MCP. Active mode requires a paid plan plus verified-domain authorization from the dashboard. Args: target (URL or hostname), mode? (passive|active).
list_alertsčitanje
Upozorenja na prijetnje uživo (razlike CT logova, promjene DNS-a, listinzi threat intela). Dostupno samo na planu Unlimited; planovi Hobby i Pro vraćaju praznu listu. Args: domain_id?, active_only?, limit?: 1..200.
get_alertčitanje
Single alert with the relevant domain, severity, type, and event details. Args: alert_id (uuid).
dismiss_alertpisanje · idempotent
Označi alert kao dismissed. Idempotent — re-dismissing je no-op. Args: alert_id (uuid).

Resources

Resources omogućavaju vašem client da attach FixVibe data direktno u conversation, umjesto da agent re-fetch na svaki turn. U Claude Desktop kliknite @ menu → fixvibe.

fixvibe://scan/{scan_id}/reportjson
Puni FixVibe scan report uključujući svaki check i svaki finding.
fixvibe://finding/{finding_id}json
Jedan finding (severity, title, description, evidence, remediation, CWE).

Slash commands

/fixvibe-fixprompt
Renders a server-side remediation prompt for a finding, using scan context when available and falling back to generic guidance otherwise. Args: finding_id (uuid). No third-party LLM API call is made by FixVibe.

→ Quotas, RLS i severity gating primjenjuju se identično na MCP i REST calls.

MCP server — Docs · FixVibe