How do I authenticate with StackHawk?

You use the login capability provided by the MCP. You will need to provide your StackHawk API Token to establish a valid bearer token for subsequent calls.

Can I stop a scan that is already running?

Yes, you can instruct your AI client to stop a specific scan using the execution UUID.

What kind of security alerts can I triage?

You can triage any DAST security alert by assigning it a status like FALSE_POSITIVE, RISK_ACCEPTED, or IN_PROGRESS.

Which AI clients can use this MCP?

This MCP works with any MCP-compatible client, including Claude, Cursor, Windsurf, and VS Code.

Can I see all my applications at once?

Yes, the list_applications capability will return all registered DAST applications in your StackHawk organization.

Are scans executed locally or in the cloud?

Scans run on the StackHawk cloud infrastructure. The MCP integration only triggers and monitors them. no heavy processing happens in your AI context.

Why is the login step required?

The StackHawk API uses short-lived Bearer tokens. The login capability exchanges your API key for a session token that authenticates all subsequent requests.

Can the agent triage alerts automatically?

Yes. Use triage_alert to mark specific vulnerabilities as false positives, accepted risks, or confirmed issues. Each triage action targets a single alert by ID.

An astronaut overseeing a futuristic data hub

Download PDF Markdown Version

Connect StackHawk to ChatGPT, Claude and Gemini

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Manage DAST scans and triage vulnerabilities without leaving your chat interface.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 10 capabilities

We ship only the actions that matter.

Capability set01 / 03

01-04

4 capabilities in this set.

Part of 10 available through StackHawk.

01
Login
This capability authenticates your session to obtain a Bearer access token. You need this token for all other StackHawk operations.
02
Get application details
This capability pulls the specific configuration settings for a single StackHawk application.
03
Get organization details
This capability retrieves your StackHawk organization information and current subscription tier.
04
Get scan alerts
This capability downloads the specific security alerts found during a DAST scan.

Capability set02 / 03

05-07

3 capabilities in this set.

Part of 10 available through StackHawk.

05
Get scan results
This capability fetches the full results and metadata for a particular DAST scan execution.
06
List applications
This capability returns a list of all DAST applications registered within your StackHawk organization.
07
Triage alert
This capability allows you to update the status of a security alert to RISK_ACCEPTED, FALSE_POSITIVE, or IN_PROGRESS.

Capability set03 / 03

08-10

3 capabilities in this set.

Part of 10 available through StackHawk.

08
List API keys
This capability provides a list of API keys configured for your organization to help with security auditing.
09
List environments
This capability lists the different scan environments, like Production or Staging, configured for an application.
10
List scans
This capability retrieves a list of all DAST scan executions, including their IDs and high level alert counts.

Real work

What teams actually run

CI/CD Security Checks

Trigger a new DAST scan immediately after a new build is deployed to a staging environment.

Rapid Vulnerability Triage

Ask your agent to identify false positives in a recent scan to clear the backlog.

Environment Auditing

Quickly list all configured environments for an application to ensure coverage.

Security Compliance Monitoring

Retrieve organization details and subscription tiers to verify compliance status.

Automate a task

Put StackHawk to work on one thing.

Step-by-step automations your AI runs through this Connector: the workflow, the prompts to start with, and the exact capabilities behind each move.

One connector, every AI

StackHawk works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

Building your own app? The connector is yours to use.

You don't need a client to put StackHawk to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

909ms average. Fast in production.

StackHawk is checked daily against the live service.

Daily averagePeak 1132ms

Oct 3Today

Fastest day: 706ms
Slowest day: 1132ms
14-day trend: Slowing+11%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 10 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of StackHawk, so you can see the experience inside your AI.

It does not authenticate your account with StackHawk. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

StackHawk Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_jum2d82i9iEL2aHAYqrgxEwcXG8hsTWADiZhQ3ew/mcp

Claude Desktop

Follow the steps below to connect in seconds.

1In Claude Desktop, open Settings → Connectors.
2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
3Click Add and start a new chat — StackHawk capabilities are ready to use.

Configuration · claude_desktop_config.jsonCopy

{
  "mcpServers": {
    "stackhawk-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_jum2d82i9iEL2aHAYqrgxEwcXG8hsTWADiZhQ3ew/mcp"
    }
  }
}

Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up StackHawk in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work StackHawk owners hand off.

This MCP is built for technical teams that need to integrate security testing directly into their development and deployment cycles.

01
DevSecOps Engineers
They use the AI to perform real-time security verification during the deployment process.
02
Engineering Leaders
They use the AI to pull high level threat data across multiple applications.
03
Backend Developers
They use the AI to check for security regressions in microservices right from their terminal.

FAQ

Questions StackHawk owners ask.

01
How do I authenticate with StackHawk?
You use the login capability provided by the MCP. You will need to provide your StackHawk API Token to establish a valid bearer token for subsequent calls.
02
Can I stop a scan that is already running?
Yes, you can instruct your AI client to stop a specific scan using the execution UUID.
03
What kind of security alerts can I triage?
You can triage any DAST security alert by assigning it a status like FALSE_POSITIVE, RISK_ACCEPTED, or IN_PROGRESS.
04
Which AI clients can use this MCP?
This MCP works with any MCP-compatible client, including Claude, Cursor, Windsurf, and VS Code.
05
Can I see all my applications at once?
Yes, the list_applications capability will return all registered DAST applications in your StackHawk organization.
06
Are scans executed locally or in the cloud?
Scans run on the StackHawk cloud infrastructure. The MCP integration only triggers and monitors them. no heavy processing happens in your AI context.
07
Why is the login step required?
The StackHawk API uses short-lived Bearer tokens. The login capability exchanges your API key for a session token that authenticates all subsequent requests.
08
Can the agent triage alerts automatically?
Yes. Use triage_alert to mark specific vulnerabilities as false positives, accepted risks, or confirmed issues. Each triage action targets a single alert by ID.

Explore

More in Security Compliance

Connect StackHawk to Claude, Cursor, ChatGPT & more

Your AI does the work. We keep it safe and sound.

Each Connector runs inside its own sealed environment.

One switch stops every agent. Instantly.

Spending limits that pause instead of surprise.

We ship only the actions that matter.

01-04

Login

Get application details

Get organization details

Get scan alerts

05-07

Get scan results

List applications

Triage alert

08-10

List API keys

List environments

List scans

What teams actually run

CI/CD Security Checks

Rapid Vulnerability Triage

Environment Auditing

Security Compliance Monitoring

Building your own app? The connector is yours to use.

StackHawk Connector

Claude Desktop

DevSecOps Engineers

Engineering Leaders

Backend Developers

How do I authenticate with StackHawk?

Can I stop a scan that is already running?

What kind of security alerts can I triage?

Which AI clients can use this MCP?

Can I see all my applications at once?

Are scans executed locally or in the cloud?

Why is the login step required?

Can the agent triage alerts automatically?

Katalon TestOps (AI Test Management) AI Connector

Beagle Security AI Connector

Testim AI Connector

Beagle Security AI Connector

Suggestions

TestRail AI Connector

Sauce Labs AI Connector

Acunetix 360 AI Connector

Xray (Test Management) AI Connector