# Intruder MCP for AI Agents AI Agent Connect > Intruder MCP lets you automate vulnerability scanning and security monitoring through the Intruder.io API. It gives your AI agent the ability to pull security issues, track scan progress, and audit cloud integrations. Use it to manage your cybersecurity posture without manual dashboard hopping. ## Overview - **Category:** security-compliance - **Price:** Free - **Endpoint:** https://edge.vinkius.com/vk_preview_iyhuD2wEGTseUCk5fcaiqvHMhmFGhDoV5W6VUzpY/ai-agent-connect - **Tags:** cybersecurity, vulnerability-assessment, security-monitoring, cloud-security, threat-detection, audit-logs ## Description This Connector lets you put your security posture on autopilot by connecting your AI agent directly to the Intruder.io API. Instead of jumping between tabs to check your latest vulnerability scans or hunting for specific security flaws, you can just ask your agent to do the heavy lifting. You can pull detailed issue reports, check your cloud integration status, or see exactly which targets are currently being monitored. It's built for teams that need to move fast on security without the manual overhead of constant dashboard checking. When you add this to your Vinkius catalog, you get a direct line into your security infrastructure, making it easy to turn complex audits into quick conversations. You can quickly see which assets are being scanned, get remediation advice for specific flaws, and keep a close eye on your license capacity across the organization. ## Tools ### list_cloud_integrations View all configured cloud connections for AWS, Azure, and Google Cloud. This is great for auditing discovery scope. ### list_issues Get a full list of security flaws with severity levels and current status. Use this as your primary auditing tool. ### list_scans See a history of all vulnerability scans including types and timestamps. This helps you track scan frequency. ### list_targets List every infrastructure and application target being monitored. Use this to see your total scan coverage. ### list_teams See the different organization teams and their access levels. This helps you understand your internal controls. ### list_licences Check your current subscription status and license capacity. This helps you stay within your plan limits. ### get_issue Get specific remediation advice and details for a single security flaw. It helps you understand how to fix a bug. ### get_scan Pull a summary of findings and duration for a specific security assessment. Use this to audit specific scan results. ### get_target See the metadata and tags for a specific piece of infrastructure. It helps you deep-dive into an asset's status. ### get_account View your Intruder account settings and identity details. Use this to verify your current configuration. ## Prompt Examples **Prompt:** ``` Show me all the high and critical issues we have right now. ``` **Response:** ``` ### High and Critical Security Issues | Issue | Severity | Status | | :--- | :--- | :--- | | SQL Injection on Login Page | **Critical** | Open | | Outdated SSL Certificate | **High** | In Progress | | Cross-Site Scripting (XSS) | **High** | Open | **Next Steps:** - I can pull the **remediation advice** for any of these. - I can check the **affected targets** for the SQL Injection. - Would you like me to prioritize the Critical issue first? ``` **Prompt:** ``` What's the status of our last AWS scan? ``` **Response:** ``` ### Last AWS Scan Summary - **Scan ID:** `scan_88291_aws` - **Status:** Completed - **Duration:** 14 minutes 22 seconds - **Findings:** 12 new issues identified. **Key Details:** - **Targets Scanned:** 42 - **High Severity:** 3 - **Medium Severity:** 7 Would you like to see the full list of findings for this scan? ``` **Prompt:** ``` Who has access to the security teams? ``` **Response:** ``` ### Organization Teams Here are the teams currently configured in your account: * **Security Operations** (Admin Access) * **DevOps Core** (Read/Write Access) * **Compliance Audit** (Read-Only Access) * **External Contractors** (Restricted Access) Do you need to see the specific members of any of these teams? ``` ## Capabilities ### Pull vulnerability reports Get specific details on security flaws including remediation advice and affected targets. ### Audit cloud integrations See how your agent discovers targets across AWS, Azure, and Google Cloud environments. ### Track scan progress Check timestamps and results for your ongoing security assessments in real time. ### Monitor target metadata View specific tags and status for individual infrastructure assets. ### Manage account permissions Verify license capacity and team access controls across your entire organization. ## Use Cases ### Automated Security Triage A security engineer asks their agent to find all critical issues. The agent uses list_issues to pull the flaws and get remediation advice for the top three using get_issue. ### Cloud Integration Audit A DevSecOps lead wants to know which cloud providers are connected. The agent uses list_cloud_integrations to verify AWS and Azure status. ### Scan Status Tracking An admin needs to know if the last scan finished. The agent uses list_scans to find the latest ID and get_scan to pull the duration and findings summary. ### License & Team Review An IT manager needs to check if the team has enough seats. The agent uses list_licences and list_teams to provide a capacity report. ## Benefits - Stop jumping between tabs by using list_issues to pull all security flaws into a single view for your agent to summarize. - Get immediate remediation advice for specific security flaws using get_issue to speed up your patching cycles. - Audit your cloud footprint instantly with list_cloud_integrations to ensure AWS, Azure, and Google Cloud are properly connected. - Monitor your scan history and frequency using list_scans to maintain a consistent security heartbeat across your assets. - Verify your organization's security scope by using list_targets to see every asset currently being monitored. - Manage your team's access and license capacity with list_teams and list_licences to keep your operation compliant. ## How It Works The bottom line is you get a direct way to query your security data using natural language. 1. Connect your AI client to the Intruder.io API through the Vinkius interface. 2. Grant the necessary permissions for your agent to access your security data. 3. Ask your agent to list issues, check scan statuses, or audit your cloud targets. ## Frequently Asked Questions **Can Intruder MCP help with my cloud security?** Yes. It connects your agent to Intruder.io so you can audit your AWS, Azure, and Google Cloud integrations and see which targets are being discovered. **How does Intruder MCP handle vulnerability reports?** It pulls the full list of identified flaws, including their severity levels and current status, so you can see your security posture at a glance. **Can I use Intruder MCP to check my license status?** Yes. You can ask your agent to verify your current subscription status and license capacity to ensure your team has enough seats. **How does Intruder MCP find my cloud assets?** It allows your agent to list all configured cloud integrations, making it easy to verify your discovery scope across multiple cloud providers. **Can Intruder MCP help with DevSecOps automation?** Absolutely. It lets you automate the retrieval of scan results and security issues, which can be used to trigger automated alerts or reporting workflows. **How do I see which teams have access in Intruder MCP?** You can ask your agent to list all organization teams to see who has what level of access across your security infrastructure. **How do I get Intruder API credentials?** Log in to your Intruder portal, navigate to Settings > API, and click 'Create Access Token'. **Can I start scans with this Connector?** This initial version focuses on listing and retrieving security data. Support for triggering new scans may be added in future updates. **What cloud integrations are supported?** Intruder supports AWS, Azure, and Google Cloud Platform for automated asset discovery. **Can I start scans with this MCP?** This initial version focuses on listing and retrieving security data. Support for triggering new scans may be added in future updates.