// docs / quickstart

Amata vave

Saini, tamo'e lau scan muamua, faitau le lipoti. E moni le Free tier — e le manaomia se credit card e iloilo ai.

Asiasi i le /sign-in ma filifili Google, GitHub, po o le imeli ma le magic link. O tala fou e amata i le polokalama Free, lea e aofia ai 3 sikani i le masina ma na o sikani passive. E mafai ona e fa'aopopoina mulimuli ane mai le Tala → Tau.

2. Tamo'e se scan

Filifili se target

Mai le dashboard kiliki New scan, faapipii se URL, ma submit. E normalise e FixVibe bare hostnames (example.com → https://example.com) ma reject internal addresses (RFC 1918, link-local, AWS metadata).

Faatali ~20 sekone

A passive scan maps the app, checks shipped responses and configuration for high-confidence security signals, and prepares the report. Live progress streams via the dashboard; you do not need to refresh.

Faitau le lipoti

E tatala otometi le lipoti pe a maea. O tagata fa'aoga o le polokalama Free e na'o le va'aia o le suʻesuʻega e silisili ona ogaoga atoatoa (ulutala, fa'amatalaga, fa'amaoniga, fofo); o isi suʻesuʻega e fa'apuupuu i le itu fa'akomupiuta i ni stubs na'o le faʻaalia o le ogaoga (e leai se mea e faʻaalia i le suʻesuʻeina o le DOM). O le polokalama Hobby ma e maualuga atu (Pro, Unlimited) e fa'aopo'opo i suʻesuʻega uma ma le ki mo le kopiina o le AI fix prompt i suʻesuʻega taitasi.

3. Faʻatautaia le sikani active (filifiliga, polokalama Hobby ma maualuga atu)

Active scans perform bounded, non-destructive verification against domains you own. Add and verify a domain at Dashboard → Domains, authorize active testing for that domain, then start an Active scan from New scan → Active mode or through REST/MCP where your plan allows it.

4. Faaaoga le REST API

Mint se bearer token i Account → API tokens. E faaalia le plaintext faatasi; faapipii i lau CI / Cursor / curl.

curl

# Start a passive scan
curl -X POST https://fixvibe.app/api/v1/scans \
  -H "Authorization: Bearer fxv_..." \
  -H "content-type: application/json" \
  -d '{"target":"https://staging.example.com"}'

Full reference i /docs/api.

5. Faapipi'i FixVibe i lau AI agent (MCP)

E aumai e FixVibe se MCP server i /api/mcp ma tools e fitu, resources e lua, ma se /fixvibe-fix slash command mo templated remediation prompts. Wire i Claude Desktop / Cursor / Continue — vaai /docs/mcp.

O fea e alu i ai sosoo

Scan types — passive vs active vs GitHub repo scans, le attestation flow.
Domains — faamaonia se domain, schedule re-scans, ki live threat monitoring.
Quotas & limits — caps i tier taitasi, API rate limits, retention policies.

Ua pipii?

Lafo se imeli i support@fixvibe.app ma le id sikani ma le mea na e fa'amoemoe ai e fa'atusatusa i le mea na e va'aia. Le polokalama Hobby e maua ai le lagolago masani, le polokalama Pro e maua ai le lagolago fa'amuamua, ma le polokalama Unlimited e aofia ai le lagolago fa'apitoa.

1. Fausia se account