// docs / quickstart

Tekivu totolo

Saini, vakayacora nomu scan imatai, wilika na ripote. E dina na Free tier — sega ni gadrevi na credit card mo dikeva.

Sikova na /sign-in ka digia na Google, GitHub se imeli ena magic link. Na ivolatusi vou e tekivu ena palani Free, e wili kina e 3 na vakaraici ena vula kei na vakaraici passive ga. O rawa ni vakavinakataka ena gauna mai muri mai na iVolatusi → iSau.

2. Vakayacora e dua na scan

Digitaka e dua na target

Mai na dashboard kiliki New scan, paste e dua na URL, ka submit. E normalise o FixVibe na bare hostnames (example.com → https://example.com) ka reject internal addresses (RFC 1918, link-local, AWS metadata).

Waraka ~20 sekodi

A passive scan maps the app, checks shipped responses and configuration for high-confidence security signals, and prepares the report. Live progress streams via the dashboard; you do not need to refresh.

Wilika na ripote

Sa dolavi vakatabakidua na ripote ena gauna ni sa vakaoti. O ira na dauvakayagataka na palani Free e ratou raica ga na ka e kunei e levu duadua na nona bibi taucoko (kena ulutaga, vakamacalataki, ivakadinadina, ivakatorocaketaki); na so tale na ka e kunei e vakalekalevutaki ena yasana ni iyaya ki na stubs e vakaraitaka ga na bibi (ena vakadidiketaki ni DOM e sega ni vakaraitaka e dua na ka). Na palani Hobby kei na vei tikina e cake (Pro, Unlimited) e ratou dolavi na veika kece e kunei kei na batikara ni veivakatakili AI fix prompt ena dua na dua.

3. Cakacakataka e dua na vakaraici active (digidigi, palani Hobby kei na cake)

Active scans perform bounded, non-destructive verification against domains you own. Add and verify a domain at Dashboard → Domains, authorize active testing for that domain, then start an Active scan from New scan → Active mode or through REST/MCP where your plan allows it.

4. Vakayagataka na REST API

Mint e dua na bearer token ena Account → API tokens. E vakaraitaki vakadua na plaintext; paste ki nomu CI / Cursor / curl.

curl

# Start a passive scan
curl -X POST https://fixvibe.app/api/v1/scans \
  -H "Authorization: Bearer fxv_..." \
  -H "content-type: application/json" \
  -d '{"target":"https://staging.example.com"}'

Full reference ena /docs/api.

5. Semata FixVibe ki nomu AI agent (MCP)

E ship o FixVibe e dua na MCP server ena /api/mcp kei na tools e vitu, resources e rua, kei na /fixvibe-fix slash command me baleta na templated remediation prompts. Wire ki Claude Desktop / Cursor / Continue — raica /docs/mcp.

Na vanua mo gole tarava

Scan types — passive vs active vs GitHub repo scans, na attestation flow.
Domains — verify domain, schedule re-scans, enable live threat monitoring.
Quotas & limits — caps ni tier yadua, API rate limits, retention policies.

Sa tao?

Vakauta e dua na imeli vei support@fixvibe.app ena id ni vakaraici kei na ka o nuitaki ka vakatautauvatataki kei na ka o raica. Na palani Hobby e ciqoma na veivuke ni iyaya, na palani Pro e ciqoma na veivuke liu, ka na palani Unlimited e wili kina na veivuke ka tabaki tu.

1. Bulia e dua na account