What is the ScanLabsAI MCP server?

It is a Model Context Protocol server that exposes the ScanLabsAI security scanner to Claude and other MCP clients, so you can scan websites, read vulnerability reports, look up CVEs and fix issues without leaving your conversation.

How do I connect ScanLabsAI to Claude?

Run: claude mcp add --transport http scanlabsai https://scanlabsai.com/api/mcp — or install the npx package @scanlabsai/mcp-server for a local stdio server.

The first scan of every website is free. Further scans use AI credits, which you can buy once with no subscription.

Model Context Protocol

Scan & fix vulnerabilities inside Claude

Name: ScanLabsAI Security Scanner
Price: 9.99 GBP
Availability: InStock
Author: ScanLabsAI

Connect ScanLabsAI to Claude with MCP. Ask Claude to scan your site, read the full report, look up CVEs, and fix the issues in your codebase — all in one conversation.

1Hosted server (recommended)

Zero install. Add the hosted endpoint to Claude Code:

terminal

claude mcp add --transport http \
  scanlabsai https://scanlabsai.com/api/mcp

Or add it to any MCP client config as an HTTP/streamable server pointing at https://scanlabsai.com/api/mcp.

2Local server (npx / stdio)

Claude Code:

terminal

claude mcp add scanlabsai -- \
  npx -y @scanlabsai/mcp-server

Claude Desktop (claude_desktop_config.json):

json

{
  "mcpServers": {
    "scanlabsai": {
      "command": "npx",
      "args": ["-y", "@scanlabsai/mcp-server"]
    }
  }
}

Use your credits inside Claude

The first scan of every website is free. To scan beyond that from Claude — and to buy credits with the buy_credits tool — connect an API key so scans meter against your account.

Your API key

Connect Claude to your account so scans use your credits — and you can buy more from inside Claude.

Loading…

Tools Claude can call

scan_website

Run a full security scan — OWASP Top 10, CVEs, SSL/TLS, headers and DNS. Deep-scan option for 40,000+ vectors.

get_fix_guidance

Step-by-step remediation for any finding or CVE, so Claude can apply the fix in your code.

lookup_cves

Query the live NIST NVD CVE feed by keyword and check whether you are affected.

check_credits

Check your AI credit balance (requires your API key in the connection).

buy_credits

Get a secure Stripe checkout link to top up credits — buy without leaving Claude.

get_pricing

Check the free-first-scan policy and AI credit packs.

What it looks like

> Scan mysite.com and fix the security headers in this repo

Claude calls scan_website → reads the report →

calls get_fix_guidance for each finding →

edits your next.config.js / middleware →

re-runs scan_website to confirm the fixes ✓

Full report in-context

Claude gets the structured findings, not just a link — so it can reason about and fix each one.

Close the loop

Scan, fix, and re-scan to verify — without ever leaving Claude.

Free first scan

Every website’s first scan is free. Then pay-as-you-go with AI credits, no subscription.

Try a free scan on the web

ScanLabsAi