// docs / mcp
MCP server
Haɗa FixVibe cikin Claude Desktop, Cursor, ko duk wani client da ke magana da Model Context Protocol. AI-agent ɗinka yana samun typed access zuwa scans, findings, da irin prompts na gyara da dashboard ɗin Copy fix prompt yake amfani da su.
Ƙirƙiri API token
Ziyarci /account/api-tokens ka ƙirƙiri token mai suna, misali, claude-desktop. Kwafi plaintext value; ana nuna shi sau ɗaya.
Tokens bearer credentials ne: duk wanda yake da string ɗin zai iya karanta scans ɗinka kuma ya fara sababbi. Ajiye shi kamar password.
Nuna MCP client ɗinka zuwa /api/mcp
Claude Desktop / Cursor / Continue / Zed:
{
"mcpServers": {
"fixvibe": {
"transport": "streamable-http",
"url": "https://fixvibe.app/api/mcp",
"headers": {
"Authorization": "Bearer fxv_YOUR_TOKEN_HERE"
}
}
}
}Sake kunna client. Server fixvibe ya kamata ya bayyana a jerin MCP server ɗinsa.
Gwada shi
Tambayi agent ɗinka abubuwa kamar:
- “Jera scans na FixVibe guda 10 na ƙarshe.”
- “Nuna min critical findings a scan na baya-bayan nan.”
- “Fara passive scan a kan
https://staging.example.com.” - “Ga kowane high-severity finding a scan X, rubuta gyara.”
- “Akwai wasu open live-threat alerts a kan domains ɗina?”
- Rubuta
/fixvibe-fixtare da finding id don sauke templated remediation prompt kai tsaye cikin chat.
Kayan aiki
- list_scanskaranta
- Yana dawo da scans mafi sabo har 100 tare da status + adadin findings. Args: limit?: 1..100.
- get_scankaranta
- Scan envelope + severity summary per category ta default. Saita include_findings=true don cikakken rahoto (babba ga scans masu hayaniya; fi son list_findings + filters). Args: scan_id (uuid), include_findings?: boolean.
- list_findingskaranta
- Findings masu pagination a kan duk scans ɗinka. Args: severity?: list, check_id?, since? (ISO 8601), limit?: 1..200.
- start_scanrubuta
- Enqueues a scan and returns an id with status queued; poll get_scan to await completion. Passive mode is always available through MCP. Active mode requires a paid plan plus verified-domain authorization from the dashboard. Args: target (URL or hostname), mode? (passive|active).
- list_alertskaranta
- Faɗakarwar barazana ta kai tsaye (bambance-bambancen CT log, canje-canjen DNS, jeren threat intel). Akwai kawai akan tsarin Unlimited; tsarin Hobby da Pro suna mayar da jerin babu komai. Args: domain_id?, active_only?, limit?: 1..200.
- get_alertkaranta
- Single alert with the relevant domain, severity, type, and event details. Args: alert_id (uuid).
- dismiss_alertrubuta · idempotent
- Alama alert a matsayin dismissed. Idempotent; sake dismiss no-op ne. Args: alert_id (uuid).
Albarkatu
Resources suna bari client ɗinka ya haɗa data na FixVibe kai tsaye cikin hira, maimakon agent ya sake fetch a kowane turn. A Claude Desktop, danna menu @ → fixvibe.
- fixvibe://scan/{scan_id}/reportjson
- Cikakken rahoton FixVibe scan ciki har da kowane check da kowane finding.
- fixvibe://finding/{finding_id}json
- Finding guda ɗaya (severity, title, description, evidence, remediation, CWE).
Umarnin slash
- /fixvibe-fixprompt
- Renders a server-side remediation prompt for a finding, using scan context when available and falling back to generic guidance otherwise. Args: finding_id (uuid). No third-party LLM API call is made by FixVibe.
→ Quotas, RLS, da severity gating suna aiki iri ɗaya ga kiran MCP da REST.
