MCP server

ScanLabsAI Security Scanner Official

com.scanlabsai/scanner

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes

Website

At a glance

Type

MCP server

Publisher

scanlabsai.com (verified by the MCP Registry)

Status

Working at last check

Tools

8

Token cost

About 1,265 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http scanner https://scanlabsai.com/api/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.scanner]
url = "https://scanlabsai.com/api/mcp"

Gemini CLI

{"mcpServers":{"scanner":{"httpUrl":"https://scanlabsai.com/api/mcp"}}}

Cursor

{"mcpServers":{"scanner":{"url":"https://scanlabsai.com/api/mcp"}}}

VS Code

{"servers":{"scanner":{"type":"http","url":"https://scanlabsai.com/api/mcp"}}}

Antigravity

agy mcp add scanner https://scanlabsai.com/api/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"scanner","server_url":"https://scanlabsai.com/api/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"scanner","server_url":"https://scanlabsai.com/api/mcp"}

Tools

• buy_credits Moves money · ~119 tokens
  Get a secure Stripe checkout link to buy an AI credit pack for the signed-in account. Requires a ScanLabsAI API key in the MCP connection. Credits are added automatically once payment completes. Packs: starter (5), pro (15), agency (50).
• check_credits ~76 tokens
  Check the signed-in account's AI credit balance. Requires a ScanLabsAI API key in the MCP connection (Authorization: Bearer slai_...). Create one at https://scanlabsai.com/mcp.
• compliance_report ~193 tokens
  Generate a website compliance report — the same automated assessment the ScanLabsAI agency portal runs — covering GDPR/CCPA privacy, WCAG 2.1 AA accessibility, PCI DSS 4.0 payment security and general standards. Returns an overall score, per-category scores and the failing/at-risk checks with recomm
• get_fix_guidance ~117 tokens
  Get detailed, step-by-step remediation guidance for a specific vulnerability or security issue (e.g. "missing Content-Security-Policy header", "SQL injection", a CVE id). Returns actionable fixes.
• get_pricing ~46 tokens
  Get ScanLabsAI pricing: the free-first-scan policy and AI credit packs.
• lookup_cves ~108 tokens
  Look up recent CVEs from the NIST NVD feed, optionally filtered by keyword. Returns id, severity, score and summary.
• scan_agent ~405 tokens
  Red-team an AI agent for security weaknesses — prompt injection, system-prompt leakage, sensitive-data disclosure, unsafe output handling and excessive agency — mapped to the OWASP LLM Top 10, and return a Markdown report. This is agent-to-agent scanning: use it to assess another agent from here. Tw
• scan_website ~201 tokens
  Run a ScanLabsAI security scan against a website and return a full Markdown vulnerability report (grouped by severity, with descriptions and remediation) that you can analyse, act on, and the user can save as security-report.md. Checks OWASP Top 10, CVEs, SSL/TLS, security headers and DNS. Use deep=

Browse

• Stripe tools
• Domains and DNS
• Converting to Markdown
• Payments
• Databases

Related MCP servers

• Cybercentry Verification
  Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402.
• Zovo Website Status Checker
  Is it down, or just you?
• Mozilla Observatory
  MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…
• Presend MCP Server
  Before an AI agent installs an npm/PyPI package: typosquat, vulnerability and existence checks.
• FEDLIN Scanners
  Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.
• Blackwood State
  Pay-per-call tools for agents: onchain data, ECB FX rates, text tools. USDC on Base, x402
• OrionCMD Checks
  Domain threat checks, a 30-day domain watch, TLS/DNS/email-auth checks and a $2 site audit (x402).
• ContrastAPI
  55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/com.scanlabsai/scanner.svg)](https://aptlynx.net/servers/com.scanlabsai/scanner)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents