// docs / quickstart
Utqay qallariy
Sign up, run niyki first qhaway, read chay willakuy. The Free tier kan real — mana credit card required man evaluate.
1. Yupayta kamay
/sign-inman riy hinaspa Google, GitHub icha magic link emailta akllay. Mosoq cuentakuna Free planmanta qallarinku, kayqa killapi 3 escaneokuna pasivo escaneokuna sapallankama. Cuenta → Cobranzamanta qhipaman wicharichinkichis.
2. Qhawayta purichiy
Pantasqata akllay
From chay dashboard click New qhaway, paste a URL, hinallataq submit. FixVibe normalises bare hostnames (example.com → https://example.com) hinallataq rejects internal addresses (RFC 1918, link-local, AWS metadata).
Wait ~20 seconds
A passive scan maps the app, checks shipped responses and configuration for high-confidence security signals, and prepares the report. Live progress streams via the dashboard; you do not need to refresh.
Willakuyta ñawinchay
Reporteqa tukuptin sapallan kicharikun. Free plan ruwaqkunaqa hatun gravedad tarisqallata hunt'a rikunku (sutin, willay, prueba, allinchay); huk tarisqakunaqa servidor ladopi gravedad rikuchiq stubsmanllam ch'utichikun (DOM qhawasqakunamanta mana imatapas rikuchinchu). Hobby plan hinaspa hunt'asqankuna (Pro, Unlimited) tukuy tarisqakunata kichanku, sapa kuti AI fix prompt copiay botonta yapaspa.
3. Active escaneo ruway (akllanapaq, Hobby plan hinaspa hunt'asqankuna)
Active scans perform bounded, non-destructive verification against domains you own. Add and verify a domain at Dashboard → Domains, authorize active testing for that domain, then start an Active scan from New scan → Active mode or through REST/MCP where your plan allows it.
4. Use chay REST API
Mint a bearer token at Account → API tokens. Plaintext kan shown once; paste it into niyki CI / Cursor / curl.
# Start a passive scan
curl -X POST https://fixvibe.app/api/v1/scans \
-H "Authorization: Bearer fxv_..." \
-H "content-type: application/json" \
-d '{"target":"https://staging.example.com"}'Full reference at /docs/api.
5. Plug FixVibe into niyki AI agent (MCP)
FixVibe ships an MCP sirwiq at /api/mcp wan seven tools, two resources, hinallataq a /fixvibe-fix slash command paq templated remediation prompts. Wire it into Claude Desktop / Cursor / Continue — see /docs/mcp.
Mayman qatiyta
- Qhaway rikch'akuna — passive vs active vs GitHub repo qhawaykuna, chay attestation flow.
- Dominiokuna — verify a dominio, schedule re-qhawaykuna, enable live threat monitoring.
- Rakiyniyuq tupukuna — per-tier caps, API rate limits, retention policies.
Sasachakunkichu?
support@fixvibe.appman emailta apachiy escaneo idninwan, suyakusqaykita rikusqaykiwan tinkuchispa. Hobby plan estándar yanapayta tarin, Pro plan ñawpaqman yanapayta tarin, Unlimited planpitaq dedicado yanapay kashan.
