// docs / mcp
MCP server
FixVibe-i Claude Desktop, Cursor ýa-da Model Context Protocol gepleýän islendik client bilen baglaň. AI agent-iňiz scans, findings we dashboard-daky Copy fix prompt düwmesini işledýän şol bir templated fix prompts-a typed access alýar.
API token dörediň
/account/api-tokens sahypasyna giriň we meselem claude-desktop atly token dörediň. Plaintext value göçüriň — ol bir gezek görkezilýär.
Tokens bearer credentials: string kimde bolsa scans-yňyzy okap we täzelerini başlap biler. Ony password ýaly saklaň.
MCP client-iňizi /api/mcp salgysyna gönükdiriň
Claude Desktop / Cursor / Continue / Zed:
{
"mcpServers": {
"fixvibe": {
"transport": "streamable-http",
"url": "https://fixvibe.app/api/mcp",
"headers": {
"Authorization": "Bearer fxv_YOUR_TOKEN_HERE"
}
}
}
}Client-i restart ediň. fixvibe server onuň MCP server list içinde görünmeli.
Synap görüň
Agent-iňizden şular ýaly soraň:
- “Soňky 10 FixVibe scan-ymy sanawla.”
- “Iň soňky scan-daky critical findings-i görkez.”
- “
https://staging.example.comgarşy passive scan başlat.” - “Scan X-daky her high-severity finding üçin fix ýaz.”
- “Domenlerimde açyk live-threat alerts barmy?”
- Templated remediation prompt-y göni chat içine düşürmek üçin finding id bilen
/fixvibe-fixýazyň.
Tools
- list_scansread
- Status + finding counts bilen iň soňky 100 scan-a çenli gaýtarýar. Args: limit?: 1..100.
- get_scanread
- Default boýunça scan envelope + per-category severity summary. Full report üçin include_findings=true goýuň (noisy scans üçin uly — list_findings + filters has gowy). Args: scan_id (uuid), include_findings?: boolean.
- list_findingsread
- Ähli scans-yňyz boýunça paginated findings. Args: severity?: list, check_id?, since? (ISO 8601), limit?: 1..200.
- start_scanwrite
- Enqueues a scan and returns an id with status queued; poll get_scan to await completion. Passive mode is always available through MCP. Active mode requires a paid plan plus verified-domain authorization from the dashboard. Args: target (URL or hostname), mode? (passive|active).
- list_alertsread
- Göni howp duýduryşlary (CT log tapawutlary, DNS üýtgemeleri, threat intel sanawlary). Diňe Unlimited meýilnamasynda elýeterli; Hobby we Pro meýilnamalary boş sanaw gaýtaryp berýär. Args: domain_id?, active_only?, limit?: 1..200.
- get_alertread
- Single alert with the relevant domain, severity, type, and event details. Args: alert_id (uuid).
- dismiss_alertwrite · idempotent
- Alert-i dismissed diýip belläň. Idempotent — gaýtadan dismiss etmek no-op. Args: alert_id (uuid).
Resources
Resources client-iňize FixVibe data-ny göni conversation içine attach etmäge mümkinçilik berýär, agent her turn ony re-fetch etmegiň ýerine. Claude Desktop-da @ menu → fixvibe basyň.
- fixvibe://scan/{scan_id}/reportjson
- Her check we her finding bilen doly FixVibe scan report.
- fixvibe://finding/{finding_id}json
- Ýeke finding (severity, title, description, evidence, remediation, CWE).
Slash commands
- /fixvibe-fixprompt
- Renders a server-side remediation prompt for a finding, using scan context when available and falling back to generic guidance otherwise. Args: finding_id (uuid). No third-party LLM API call is made by FixVibe.
→ Quotas, RLS we severity gating MCP we REST calls üçin birmeňzeş apply bolýar.
