Use Wallarm with your AI.
Connect your account once and let the AI you already use work with it, without building another integration. Monitor API security, detect attacks, and manage WAF vulnerabilities on Wallarm. the end-to-end API security platform.
Developed, maintained, and hosted by Vinkius.
MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED
Waiting for input…
Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.
Complete set · 10 capabilities
The complete Wallarm capability set.
These are the exact actions your AI can choose when you ask it to work with Wallarm.
01-04
4 capabilities in this set.
Part of 10 available through Wallarm.
- 01
List ip acl rules
Lists configured IP allowlist and denylist rules
- 02
Search security hits
Shows full request headers and payloads for blocked traffic. Searches for granular individual malicious HTTP request hits intercepted by WAF nodes
- 03
Update vulnerability status
Valid statuses: open, closed, falsepositive. Changes the lifecycle status of a vulnerability (e.g., mark as closed or false positive)
- 04
Get vulnerability details
Retrieves comprehensive diagnostic data and exploit evidence for a specific vulnerability ID
05-07
3 capabilities in this set.
Part of 10 available through Wallarm.
- 05
Search security attacks
Searches for security attacks detected by Wallarm, grouped by vector (SQLi, XSS, etc.)
- 06
Search vulnerabilities
Lists all open security vulnerabilities discovered in live API traffic
- 07
Get discovered API inventory
Retrieves the API inventory automatically discovered through passive traffic analysis
08-10
3 capabilities in this set.
Part of 10 available through Wallarm.
- 08
List filtering nodes
Lists all deployed Wallarm WAF/API gateway filtering nodes
- 09
Create ip acl rule
List_type must be "white" or "black". Adds an IP or CIDR range to the globalThis allowlist or denylist
- 10
Get client info
Retrieves details about the Wallarm account, subscription, and feature status
Observed, not estimated
866ms average. Fast in production.
Wallarm is checked daily against the live service.
- Fastest day
- 673ms
- Slowest day
- 1065ms
- 14-day trend
- Slowing+15%
Connect your client
One URL. Every client.
Activate the Connector, copy your link, and paste it into the client you already use. 10 capabilities arrive ready to run.
Preview access · not provider authentication
The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of Wallarm, so you can see the experience inside your AI.
It does not authenticate your account with Wallarm. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.
Wallarm Connector
You're all set. Choose your MCP client and follow the setup instructions.
https://edge.vinkius.com/vk_preview_wtqoTiRGf7f9vV5ladmPTVkzskQH77LY6DMZ7ltz/mcpClaude Desktop
Follow the steps below to connect in seconds.
- 1In Claude Desktop, open Settings → Connectors.
- 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
- 3Click Add and start a new chat — Wallarm capabilities are ready to use.
{
"mcpServers": {
"wallarm-mcp": {
"url": "https://edge.vinkius.com/vk_preview_wtqoTiRGf7f9vV5ladmPTVkzskQH77LY6DMZ7ltz/mcp"
}
}
}
Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline
Step-by-step instructions for each client are in the guide. How to connect
FAQ
Questions Wallarm owners ask.
- 01
Can I block a malicious IP address directly from my agent?
Yes. Using the create_ip_acl_rule capability, you can immediately add an IP or CIDR range to your global denylist (black list) to mitigate threats as soon as they are identified during your security audit.
- 02
How can I see all the API endpoints Wallarm has discovered?
The get_discovered_api_inventory capability provides you with the full API inventory automatically discovered through passive traffic analysis, showing exposed endpoints, methods, and parameters without requiring manual specifications.
- 03
Is it possible to triage vulnerabilities and change their status via chat?
Absolutely. You can use update_vulnerability_status to change a vulnerability's lifecycle status (e.g., to closed or false positive) once you have investigated it or applied remediation steps.
Explore
More in Fort Knox
Beagle Security AI Connector
Scan your web applications for vulnerabilities, generate penetration test reports, and strengthen your securit
ViewIBM QRadar AI Connector
Connect IBM QRadar to any AI agent via MCP.
ViewElastic Security AI Connector
Manage SIEM and SOC operations via Elastic Security — monitor detection rules, search security alerts (Signals
ViewSEON AI Connector
Prevent online fraud with device fingerprinting, email and phone analysis, and real-time risk scoring for digi
View
Suggestions
IPQualityScore (IPQS) AI Connector
Detect fraud, proxies, and malicious activity via IPQS API.
ViewBeagle Security AI Connector
Automate security testing via Beagle Security — list projects, start tests, and retrieve results directly from
View42Crunch AI Connector
Automate API security testing via 42Crunch — manage collections, trigger audits, run conformance scans, and re
ViewRegex Explainer Stepper AI Connector
Decompose complex regular expressions into a step-by-step AST walkthrough and perform safety audits.
View
