How to Use the Halo Security MCP in Mastra AI

Q: How do I register this MCP Server in Mastra AI?

Install @mastra/mcp and initialize the client with your Vinkius server URL. Call mcpClient.listTools() and spread the resulting toolset directly into your Mastra agent's tool configuration to expose commands like listdnsrecords.

Q: Can Mastra AI automatically retry failed Halo Security scans?

Yes, Mastra's workflow engine handles this natively. If a triggerscan call fails due to network issues or API limits, the workflow uses exponential backoff to retry the scan without manual intervention.

Q: How do I implement human-in-the-loop approvals with this MCP Server and Mastra AI?

You can configure Mastra's requireToolApproval flag on sensitive actions like addtarget. This pauses the agent's execution and waits for an engineer's confirmation before adding a new asset to your monitoring list.

Build resilient security workflows that trigger scans and track targets using Mastra AI and Halo Security.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Halo Security MCP to Mastra AI

Create your Vinkius account to connect Halo Security to Mastra AI and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Halo Security with Mastra AI

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Automated scanning loops in Mastra AI

Build self-healing security pipelines that don't break when an API rate limit is reached. Mastra AI uses its built-in workflow engine to run `trigger_scan` and automatically retry the call with exponential backoff if the Halo Security platform is temporarily throttled. This MCP Server allows your Mastra agents to monitor scan progress by checking `list_scans` in a structured loop. If a scan fails, the workflow branches to notify your team instead of crashing the entire security pipeline.

Conditional target triage and risk scoring

Automate how your team responds to new infrastructure. When a developer registers a new domain, your Mastra AI agent uses this MCP Server to call `add_target` and execute conditional logic based on the risk score returned by `get_security_risk`. If the target's risk score exceeds your threshold, the agent immediately pulls detailed context using `list_issues` and `get_issue`. The workflow then routes high-severity bugs to your urgent triage queue while ignoring low-risk noise.

Continuous network and certificate tracking

Keep a constant eye on your external attack surface. Mastra agents can run scheduled workflows that query `list_open_ports` and `list_certificates` to detect unexpected exposures or expiring TLS setups. This framework cross-references this data against known assets from `list_targets`. If a new open port is detected on a production target, the agent instantly spins up a sub-workflow to isolate the asset.

Setup guide

Set up Halo Security MCP in Mastra AI

Prerequisites

Node.js 18+ and a TypeScript project
@mastra/mcp + @mastra/core packages
Active Vinkius subscription with a valid endpoint token

1

Install dependencies
Run npm install @mastra/mcp @mastra/core plus your preferred model provider (e.g. @ai-sdk/openai).
2

Configure the MCPClient
Create an MCPClient with your Vinkius endpoint as a URL object. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com.
3

Discover and inject tools
Call mcpClient.listTools() and spread the result into your agent's tools object. All Halo Security tools become native Mastra tools.
4

Run with any model
Swap openai("gpt-4o") for any AI SDK-compatible provider. Call agent.generate() and the agent routes tool calls through MCP automatically.

agent.ts

import { MCPClient } from "@mastra/mcp";
import { Agent } from "@mastra/core/agent";
import { openai } from "@ai-sdk/openai";

const mcpClient = new MCPClient({
  id: "halo-security-mcp-client",
  servers: {
    "halo-security-mcp": {
      url: new URL(
        "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
      ),
    },
  },
});

const agent = new Agent({
  name: "Halo Security Agent",
  model: openai("gpt-4o"),
  instructions: "You have access to Halo Security tools.",
  tools: {
    ...(await mcpClient.listTools()),
  },
});

const result = await agent.generate(
  "List recent Halo Security transactions"
);
console.log(result.text);

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Halo Security. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Halo Security now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Halo Security MCP in Mastra AI

Install `@mastra/mcp` and initialize the client with your Vinkius server URL. Call `mcpClient.listTools()` and spread the resulting toolset directly into your Mastra agent's tool configuration to expose commands like `list_dns_records`.

Yes, Mastra's workflow engine handles this natively. If a `trigger_scan` call fails due to network issues or API limits, the workflow uses exponential backoff to retry the scan without manual intervention.

You can configure Mastra's `requireToolApproval` flag on sensitive actions like `add_target`. This pauses the agent's execution and waits for an engineer's confirmation before adding a new asset to your monitoring list.

Yes. Mastra AI can trigger concurrent tasks to inspect your infrastructure, calling `list_technologies` and `list_open_ports` simultaneously across all assets returned by `list_targets` to speed up your audits.

Your listed technologies, active CVEs, and software library versions remain strictly within your local Mastra execution context. Vinkius acts as an ephemeral, zero-trust gateway, passing data securely without ever logging your sensitive asset details.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript