ScanLabsAI Security Scanner
直接在AI助手中扫描任意网站漏洞——涵盖OWASP Top 10 Web、API和LLM应用、CVE、SSL/TLS及安全头，并提供通俗易懂的修复建议。
托管 MCP 服务器
npx add-mcp 'https://scanlabsai.com/api/mcp'可安装到 Claude Code、Codex、Cursor 等客户端
文档
Scan & fix vulnerabilities inside Claude
Connect ScanLabsAI to Claude with MCP. Ask Claude to scan your site, read the full report, look up CVEs, and fix the issues in your codebase — all in one conversation.
Model Context Protocol
1Hosted server (recommended)
Zero install. Add the hosted endpoint to Claude Code:
claude mcp add --transport http \
scanlabsai https://scanlabsai.com/api/mcp
Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"scanlabsai": {
"url": "https://scanlabsai.com/api/mcp"
}
}
}
Or add it to any MCP client config as an HTTP/streamable server pointing at https://scanlabsai.com/api/mcp.
2Local server (npx / stdio)
Claude Code:
claude mcp add scanlabsai -- \
npx -y @scanlabsai/mcp-server
Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"scanlabsai": {
"command": "npx",
"args": ["-y", "@scanlabsai/mcp-server"]
}
}
}
Use your credits inside Claude
The first scan of every website is free. To scan beyond that from Claude — and to buy credits with the buy_credits tool — connect an API key so scans meter against your account.
Your API key
Connect Claude to your account so scans use your credits — and you can buy more from inside Claude.
Loading…
Tools Claude can call
scan_website
Run a full security scan — OWASP Top 10, CVEs, SSL/TLS, headers and DNS. Deep-scan option for 40,000+ vectors.
scan_agent
Agent-to-agent scanning: red-team another AI agent or MCP server for prompt injection, data leakage and unsafe tools — OWASP LLM Top 10.
compliance_report
Generate a GDPR/CCPA, WCAG 2.1 AA and PCI DSS 4.0 compliance report for a site — the agency-portal assessment (1 credit).
get_fix_guidance
Step-by-step remediation for any finding or CVE, so Claude can apply the fix in your code.
lookup_cves
Query the live NIST NVD CVE feed by keyword and check whether you are affected.
check_credits
Check your AI credit balance (requires your API key in the connection).
buy_credits
Get a secure Stripe checkout link to top up credits — buy without leaving Claude.
get_pricing
Check the free-first-scan policy and AI credit packs.
What it looks like
> Scan mysite.com and fix the security headers in this repo
Claude calls scan_website → reads the report →
calls get_fix_guidance for each finding →
edits your next.config.js / middleware →
re-runs scan_website to confirm the fixes ✓
Full report in-context
Claude gets the structured findings, not just a link — so it can reason about and fix each one.
Close the loop
Scan, fix, and re-scan to verify — without ever leaving Claude.
Free first scan
Every website’s first scan is free. Then pay-as-you-go with AI credits, no subscription.