• EXPOSURE
  • INVENTORY
  • REMEDIATION
  • HUMAN

How to audit security configurations with your AI

Connect StackHawk to your AI client once. From there, your agent handles the heavy lifting of pulling configuration data and scanning for exposed keys.

Ask AI about this page

Short answer

How can I use AI to audit my security configurations?

Your AI client uses StackHawk to pull organization details and list all active API keys. It then compares these against your security policies to find vulnerabilities. You get a clear view of your exposure without manual data gathering.

Audit outcomes

Where your audit data lands.

The AI organizes its findings into these specific areas.

EXPOSURE

Identified security gaps

The AI flags any API keys or organization settings that violate your security rules. These appear as high-priority alerts.

INVENTORY

Complete key lists

Your agent compiles a full list of active API keys. This gives you a single source of truth for what's currently live.

REMEDIATION

Actionable fix lists

The AI suggests specific changes to your configuration. You decide which ones to apply to close the gaps.

HUMAN

Final policy review

The AI cannot change your security settings. You must manually review and approve every configuration change.

The workflow

What your AI does when the audit starts.

The AI automates the data collection phase so you can focus on the results.

  1. Establish access

    The agent logs into your StackHawk account to begin the session.

    login

  2. Gather context

    Your AI pulls the specific organization details needed to understand your environment.

    get_organization_details

  3. Scan for keys

    The agent pulls a full list of all existing API keys to check for unauthorized access.

    list_api_keys

  4. Analyze posture

    The AI compares the gathered organization data and key lists against your security requirements.

    get_organization_detailslist_api_keys

Try it

Copy these to start.

Use these prompts to kick off your audit.

Starting points

These are starting points. Swap out the specific organization names or key types to match your setup.

StackHawk Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_jum2d82i9iEL2aHAYqrgxEwcXG8hsTWADiZhQ3ew/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — StackHawk capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "stackhawk-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_jum2d82i9iEL2aHAYqrgxEwcXG8hsTWADiZhQ3ew/mcp"
    }
  }
}
Copy into chat04

  • Get the details for my 'Production-Main' organization and tell me if anything looks off.

  • List all API keys for my current organization and flag any that look like they belong to old test accounts.

  • Check my organization details and tell me if any API keys are missing required security tags.

  • Pull the list of API keys and summarize which ones are currently active in my primary organization.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect StackHawk once, then ask.

Click the link to connect. Your login credentials stay encrypted and secure on our side. You can find the full tool list on the StackHawk Connector page.

Connect StackHawk to your AI

FAQ

How the audit behaves

  • 01

    Can the AI delete my API keys?

    No. The AI can only read organization details and list keys. It cannot delete or modify any data.

  • 02

    Can the AI change my security settings?

    No. The AI identifies issues, but you must manually log in to StackHawk to change any configurations.

  • 03

    Does the AI see all my organization data?

    The AI only sees the data it retrieves through the specific tools provided in the StackHawk MCP.

  • 04

    How does the AI know if a key is a risk?

    The AI compares the data it pulls from the list of API keys against the security patterns you describe in your prompt.

  • 05

    Can I use this with any AI client?

    Yes, you can use this with any MCP-compatible client like Claude, Cursor, or Windsurf.

  • More questions about StackHawk? The Connector page answers them. See everything the StackHawk Connector can do

Connect StackHawk to Claude, Cursor, ChatGPT & more