• ACCESS
  • INVENTORY
  • RISK
  • HUMAN

How to audit server security with your AI

Connect Laravel Forge to your AI client to scan your infrastructure for access risks. Once connected, your agent can pull live data to find security gaps.

Ask AI about this page

Short answer

How can I use AI to audit my server security?

Your AI uses Laravel Forge tools to pull a list of all active servers and their associated SSH keys. It then compares this metadata against your security policies to flag unauthorized users or old keys. You get a clear breakdown of access risks and infrastructure state.

Audit outcomes.

Where your findings land.

The AI categorizes its findings so you can act on them immediately.

ACCESS

SSH key audit

The AI identifies every active key across your fleet. You'll see exactly who has entry points to your machines.

INVENTORY

Metadata check

The agent pulls technical details for every instance. This helps you spot forgotten or misconfigured hardware.

RISK

Unauthorized access flags

Your AI highlights keys or metadata that don't match your expected setup. It points out the specific outliers.

HUMAN

Manual remediation

The AI identifies the problems but doesn't change your settings. You decide which keys to revoke or servers to update.

The workflow

What your AI does when the request arrives.

The AI follows a logical path from broad discovery to specific inspection.

  1. Map the fleet

    The agent starts by pulling a complete list of your active infrastructure to establish a baseline.

    list_servers

  2. Inspect specific instances

    It drills down into individual machines to pull detailed configuration and metadata.

    get_server

  3. Audit entry points

    The AI retrieves the SSH keys for each server to check for stale or unknown credentials.

    list_ssh_keys

  4. Flag discrepancies

    The agent compares the gathered keys and metadata against your security requirements to find mismatches.

    list_ssh_keysget_server

Try it

Copy these to start.

Paste these prompts into your chat to begin the audit.

Starting points

These are opening lines. Swap out the server names or key identifiers for your actual Forge data.

Laravel Forge Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_jzfomuWEBzKK0YLd7YZ2kG9qG8ViIw2W2udigts6/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Laravel Forge capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "laravel-forge-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_jzfomuWEBzKK0YLd7YZ2kG9qG8ViIw2W2udigts6/mcp"
    }
  }
}
Copy into chat04

  • List all my servers in Laravel Forge and tell me if any look misconfigured.

  • Check the SSH keys on my production server and flag any that look old.

  • Show me all active SSH keys across my entire Laravel Forge fleet.

  • Compare the metadata of my web-01 server against my standard security template.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Laravel Forge once, then ask.

You only need to link your account once. Your credentials stay encrypted, and you can immediately start asking questions about your infrastructure.

Connect Laravel Forge to your AI

FAQ

How the audit behaves

  • 01

    Can the AI delete my SSH keys?

    No. The AI can only read and list your keys. You must manually remove any keys through the Laravel Forge dashboard.

  • 02

    Can the AI change my server configurations?

    No. The tools only allow the AI to pull data. It cannot modify server settings or update software.

  • 03

    How does the AI know which keys are unauthorized?

    The AI doesn't know automatically. You have to tell it what your authorized keys or naming conventions look like so it can find the outliers.

  • 04

    Does this work with any MCP-compatible client?

    Yes. Once connected, you can use this with Claude, Cursor, Windsurf, or VS Code.

  • 05

    Can I audit a server that isn't in Laravel Forge?

    No. The AI can only access data for servers managed through your Laravel Forge account.

  • More questions about Laravel Forge? The Connector page answers them. See everything the Laravel Forge Connector can do

Connect Laravel Forge to Claude, Cursor, ChatGPT & more