@apviso/mcp

MCP server for interacting with the APVISO AI-powered penetration testing platform from Claude Code, Cursor, Windsurf, Codex, and other MCP-compatible tools.

Setup

1. Get your API key

Go to your APVISO dashboard → Settings → API Keys and create a new key.

2. Add to Claude Code

claude mcp add --transport stdio apviso \
  --env APVISO_API_KEY=apvk_your_key_here \
  -- npx -y @apviso/mcp

On Windows (not WSL):

claude mcp add --transport stdio apviso ^
  --env APVISO_API_KEY=apvk_your_key_here ^
  -- cmd /c npx -y @apviso/mcp

Alternative: manual config

Add to your .mcp.json (project-scoped) or ~/.claude.json (user-scoped):

{
  "mcpServers": {
    "apviso": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "@apviso/mcp"],
      "env": {
        "APVISO_API_KEY": "apvk_your_key_here"
      }
    }
  }
}

For team projects, use environment variable expansion in .mcp.json so each developer uses their own key:

{
  "mcpServers": {
    "apviso": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "@apviso/mcp"],
      "env": {
        "APVISO_API_KEY": "${APVISO_API_KEY}"
      }
    }
  }
}

3. Verify

Run /mcp inside Claude Code to check the server status.

Configuration

Variable	Required	Default	Description
APVISO_API_KEY	Yes	—	Your API key (starts with apvk_)
APVISO_API_URL	No	https://apviso.com/api	API base URL

Tools

Targets

Tool	Description
list_targets	List all registered targets
get_target	Get target details
create_target	Register a new domain
verify_target	Verify domain ownership (DNS, file, or meta tag)
get_verification_instructions	Get verification steps for a target
delete_target	Remove a target

Scans

Tool	Description
list_scans	List scans with optional status filter
get_scan	Get scan details and status
create_scan	Start a new penetration test (costs credits)

Findings

Tool	Description
list_findings	List vulnerabilities for a scan
update_finding_status	Mark findings as fixed, accepted risk, etc.

Reports

Tool	Description
get_report	Get the full pentest report as markdown

Schedules

Tool	Description
list_schedules	List recurring scan schedules
get_schedule	Get schedule details
create_schedule	Set up recurring scans (Business/Enterprise)
update_schedule	Modify a schedule
delete_schedule	Remove a schedule

Quota

Tool	Description
get_quota	Check remaining credits and billing period

License

MIT