How to Use the 42Crunch MCP in Claude

Q: How do I configure 42Crunch in Claude Desktop?

Open claudedesktopconfig.json via the developer settings menu. Add the Vinkius endpoint URL under the mcpServers key. Restart the application to see the hammer icon appear in your input box.

Run static API security audits and pull conformance reports via this MCP Server right inside Claude Desktop.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect 42Crunch MCP to Claude Desktop

Create your Vinkius account to connect 42Crunch to Claude Desktop and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup 42Crunch with Claude Desktop

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Trigger audits from Claude Desktop

The `trigger_audit` tool forces a fresh static security check against your OpenAPI specification. When your engineering team updates a spec, you tell Claude Desktop to run the audit immediately. Your agent pings 42Crunch to evaluate the new endpoints for missing authentication rules or bad data types. The `get_audit_report` tool grabs the results once the check finishes. Claude reads the raw output and summarizes exactly which lines in your YAML file failed the security check. You fix the issue before the API ever hits a staging environment.

Manage 42Crunch collections via MCP Server

The `list_collections` tool pulls every API group you maintain in the 42Crunch platform. You ask your agent to find a specific project ID so you can organize new definitions. Claude fetches the metadata and security scores for the entire collection using `get_collection`. The `import_api` tool handles adding a new definition. You drop an OpenAPI JSON file into your chat window, and the agent uploads it directly to the right collection. If an old API gets deprecated, Claude removes it completely via `delete_api`.

Pull live conformance data

The `list_scans` tool retrieves every dynamic conformance test executed against your live endpoints. You ask Claude to check if the latest deployment passed its runtime security checks. The agent grabs the historical list to find the most recent test ID. The `get_scan_report` tool pulls the actual failure details through the MCP Server into the chat interface. You read exactly which payload caused a 500 error during the security scan without logging into another dashboard.

Setup guide

Set up 42Crunch MCP in Claude Web or Desktop

1

Open Claude Settings

Go to claude.ai, click your profile icon, then navigate to Customize → Connectors.
2

Add Custom Connector

Click the "+" button and select Add custom connector. Paste your Vinkius endpoint URL: https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. For OAuth-protected servers, expand Advanced settings to add credentials.
3

Start a conversation

Open a new chat. The 42Crunch MCP tools are available immediately — no restart needed.

Endpoint URL

https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp

No configuration file needed — paste the URL directly in the Claude web interface.

Available on Free (1 connector), Pro, Max, Team, and Enterprise plans.

Prerequisites

Claude Desktop installed (macOS or Windows)
Active Vinkius subscription with a valid endpoint token

1

Open Claude Desktop Settings

Click the menu icon at the top-left corner, go to Settings → Developer → Edit Config. This opens claude_desktop_config.json in your default text editor.
2

Paste the 42Crunch MCP configuration

Copy the JSON snippet on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Restart Claude Desktop

Close and reopen the application. Claude needs a full restart to load new MCPs — refreshing a conversation is not enough.
4

Verify the connection

Open a new conversation. Click the 🔌 icon at the bottom of the message input. You should see tools listed under 42crunch-mcp.

json

{
  "mcpServers": {
    "42crunch-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by 42Crunch. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect 42Crunch now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about 42Crunch MCP in Claude Desktop

Open `claude_desktop_config.json` via the developer settings menu. Add the Vinkius endpoint URL under the `mcpServers` key. Restart the application to see the hammer icon appear in your input box.

Yes, your agent executes fresh checks. You ask it to run an audit, and it calls the tool directly. The platform processes the OpenAPI file and returns a new score.

Your agent formats the JSON response directly in the chat window. It highlights the specific vulnerabilities found during the conformance test. You read the exact HTTP requests that failed without switching contexts.

You upload new specifications using the import tool. Drop the OpenAPI file into your chat, and the agent pushes it to the correct collection ID. The platform immediately assigns a baseline security score.

Your agent reads OpenAPI specifications, security scores, and vulnerability reports. Vinkius runs the connection inside an ephemeral V8 sandbox to keep your endpoints isolated. Your proprietary API schemas never leak into persistent storage.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript