Use StackHawk with your AI.
Connect your account once and let the AI you already use work with it, without building another integration. Connect your AI to the StackHawk DAST platform. Run automated security scans, triage alerts seamlessly, and find vulnerabilities effortlessly.
Developed, maintained, and hosted by Vinkius.
MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED
Waiting for input…
Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.
Complete set · 10 capabilities
The complete StackHawk capability set.
These are the exact actions your AI can choose when you ask it to work with StackHawk.
01-04
4 capabilities in this set.
Part of 10 available through StackHawk.
- 01
Login
This token is required for all subsequent StackHawk capability calls. Authenticate and obtain a Bearer access token from StackHawk
- 02
Get application details
Get detailed configuration for a specific StackHawk application
- 03
Get organization details
Get StackHawk organization details and subscription tier
- 04
Get scan alerts
Download individual security alerts discovered by a DAST scan
05-07
3 capabilities in this set.
Part of 10 available through StackHawk.
- 05
Get scan results
Get detailed results and metadata for a specific DAST scan
- 06
List applications
Requires a Bearer token and organization ID. List all registered DAST applications in a StackHawk organization
- 07
Triage alert
Valid statuses: RISK_ACCEPTED, FALSE_POSITIVE, IN_PROGRESS. Triage a DAST security alert (accept risk, false positive, etc.)
08-10
3 capabilities in this set.
Part of 10 available through StackHawk.
- 08
List API keys
Useful for auditing and hygiene. List API keys configured for a StackHawk organization
- 09
List environments
G., Development, Staging, Production) configured on the application. List configured scan environments for a StackHawk application
- 10
List scans
Includes scan IDs and high-level alert counts. List all DAST scan executions for a StackHawk application
Observed, not estimated
883ms average. Fast in production.
StackHawk is checked daily against the live service.
- Fastest day
- 699ms
- Slowest day
- 1104ms
- 14-day trend
- Slowing+15%
Connect your client
One URL. Every client.
Activate the Connector, copy your link, and paste it into the client you already use. 10 capabilities arrive ready to run.
Preview access · not provider authentication
The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of StackHawk, so you can see the experience inside your AI.
It does not authenticate your account with StackHawk. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.
StackHawk Connector
You're all set. Choose your MCP client and follow the setup instructions.
https://edge.vinkius.com/vk_preview_jum2d82i9iEL2aHAYqrgxEwcXG8hsTWADiZhQ3ew/mcpClaude Desktop
Follow the steps below to connect in seconds.
- 1In Claude Desktop, open Settings → Connectors.
- 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
- 3Click Add and start a new chat — StackHawk capabilities are ready to use.
{
"mcpServers": {
"stackhawk-mcp": {
"url": "https://edge.vinkius.com/vk_preview_jum2d82i9iEL2aHAYqrgxEwcXG8hsTWADiZhQ3ew/mcp"
}
}
}
Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline
Step-by-step instructions for each client are in the guide. How to connect
FAQ
Questions StackHawk owners ask.
- 01
Are scans executed locally or in the cloud?
Scans run on the StackHawk cloud infrastructure. The MCP integration only triggers and monitors them. no heavy processing happens in your AI context.
- 02
Why is the login step required?
The StackHawk API uses short-lived Bearer tokens. The login capability exchanges your API key for a session token that authenticates all subsequent requests.
- 03
Can the agent triage alerts automatically?
Yes. Use triage_alert to mark specific vulnerabilities as false positives, accepted risks, or confirmed issues. Each triage action targets a single alert by ID.
Explore
More in Security Compliance
HCL AppScan AI Connector
Manage security scans and vulnerabilities with HCL AppScan — track issues and audit applications via AI.
ViewTenable AI Connector
Manage Tenable Vulnerability Management scans, inspect cloud assets, and triage CVEs natively via your AI agen
ViewRapid7 InsightVM AI Connector
Equip your AI to interact directly with Rapid7 InsightVM, extracting vulnerability assessments, scanning netwo
ViewHyperDX (Open Source Observability) AI Connector
Monitor logs, events, and alerts via HyperDX — search logs, manage alert rules, and inspect dashboards directl
View
Suggestions
Sentry AI Connector
Monitor errors and application health via Sentry — query issues, inspect events, audit releases and check aler
ViewUpGuard AI Connector
Monitor your attack surface and assess vendor security risks with continuous scanning that identifies vulnerab
ViewDatadog AI Connector
Monitor infrastructure, applications, and logs with unified observability that gives you full-stack visibility
ViewIntruder AI Connector
Automate vulnerability scanning and security monitoring via Intruder.io API.
View
