Vinkius

Salt Security MCP. Real-Time API Defense via Conversation

Salt Security gives your AI client real-time defense for your APIs. It lets you check API inventories, find hidden or 'shadow' endpoints, monitor live attacks, and automatically block malicious actors—all through conversation. Use it to audit security posture and manage governance rules without logging into a dashboard.

Salt Security MCP is compatible with Claude Claude
Salt Security MCP is compatible with ChatGPT ChatGPT
Salt Security MCP is compatible with Cursor Cursor
Salt Security MCP is compatible with Gemini Gemini
Salt Security MCP is compatible with Windsurf Windsurf
Salt Security MCP is compatible with VS Code VS Code
Salt Security MCP is compatible with JetBrains JetBrains
Salt Security MCP is compatible with Vercel Vercel
See Vinkius in Action

Give Claude and any AI agent real-world access

Map API Inventory

The tool retrieves a complete list of all auto-discovered APIs, including hidden or 'shadow' endpoints in your network.

Review Endpoint Details

You can get specific details about any single API endpoint to check for exposed sensitive data or structural issues.

Analyze Live Attacks and Threat Actors

The system lists current malicious API attacks, helping you understand the attack patterns and profiling known threat actors.

Remediate Threats Instantly

You issue a command to block an attacker immediately, passing instructions directly to your integrated WAFs.

Audit Security Design Flaws

The MCP identifies vulnerabilities and design flaws before they ever hit the live production environment.

Verify Governance Rules

You check which API governance rules are currently active and manage uploaded OpenAPI specifications.

Waiting for input…

AI Agent
Salt Security

What AI agents can do with Salt Security with 10 Tools

These ten tools allow you to audit every aspect of your API environment, from mapping unknown endpoints to automatically blocking malicious threat actors.

Make your AI actually useful.

Add this MCP to Claude, Cursor, or Windsurf and your AI stops guessing. It gets real tools to look things up, take action, and handle the stuff you keep doing by hand.

Start using Salt Security MCP

Block Attacker

Issues a command to block a specific attacker profile from accessing your APIs.

Get Attackers

Lists profiles of known threat actors identified by Salt Security.

Get Attacks

Retrieves a list of detected malicious API attack events.

Get Endpoint

Gets detailed information for a specific, named API endpoint.

Get Governance Policies

Lists all currently active governance rules governing your APIs.

Get Inventory

Retrieves the complete, auto-discovered list of every API endpoint in your environment.

Get Posture Vulnerabilities

Identifies and lists design flaws or vulnerabilities found during pre-production testing.

Get System Health

Checks the operational status of your traffic mirror ingestion service.

List Oas Specs

Lists all OpenAPI (OAS) specifications that you have uploaded for governance.

Upload Oas Spec

Uploads a new OAS/Swagger specification to register it with your security policies.

Security and governance baked right in.

Pick your AI client below to get set up. Just create a Vinkius account, subscribe, and you're instantly up and running. We handle the entire backend infrastructure, delivering out-of-the-box support for HTTPS Streamable, SSE, and OAuth2—zero messy routing required.

Salt Security MCP is compatible with Claude

Claude AI

1

Open Claude Settings

Go to claude.ai, click your profile icon, then navigate to Customize → Connectors.

2

Add Custom Connector

Click the "+" button and select Add custom connector. Paste your Vinkius endpoint URL:

https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp

Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. For OAuth-protected servers, expand Advanced settings to add credentials.

3

Start a conversation

Open a new chat. The Salt Security integration is available immediately — no restart needed.

Choose How to Get Started

Build a custom MCP for your own tools, or connect a ready-made integration from our catalog.

Build Your Own

Turn any API into an MCP. Import a spec, define Agent Skills, or deploy with MCPFusion.

  • Import from OpenAPI, Swagger, or YAML specs
  • Create Agent Skills with progressive disclosure
  • Deploy to edge with MCPFusion framework
  • Built in DLP, auth, and compliance on each call
  • Real time usage dashboard and cost metering
  • Publish to catalog or keep private
Start building

Make Your AI Do More

Start with Salt Security, then connect any of our 5,200+ other servers whenever your AI needs more. One click, no limits.

  • Use this MCP plus 5,200+ others, all in one place
  • Add new capabilities to your AI anytime you want
  • Connections are secured and governed automatically
  • Track usage and costs across all your servers
  • Works with Claude, ChatGPT, Cursor, and more
  • New servers added to the catalog weekly
Salt Security MCP server cover

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Salt Security. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

VINKIUS CLOUD

Cloud Hosted

Managed infra

V8 Isolated

Sandboxed per request

Zero-Trust Proxy

No stored credentials

DLP Enforced

Policy on each call

GDPR Compliant

EU data residency

Token Compression

~60% cost reduction

Your data is protected. See how we built it.

The headache of finding your own APIs.

Today, discovering every single API endpoint in a large microservice architecture feels like detective work. You have to log into multiple consoles—the network dashboard for traffic flow, the documentation portal for official specs, and sometimes you just don't know where to look. It’s tedious copying data between tabs just to build a picture of your true attack surface.

With this MCP, you ask your agent directly: "What APIs are running?" It runs `get_inventory` and gives you the full list. You instantly see endpoints that were never documented or approved—the 'shadow' resources that pose the biggest risk.

Salt Security MCP: Real-Time API Threat Defense

Manual incident response means switching between a monitoring system, an attacker profile database, and then finally logging into your WAF to manually type the block rule. This process takes minutes of high stress and potential human error.

Now you just ask the agent: "Block this threat." The MCP runs `block_attacker` and passes the command directly to the integrated gateways. You move from detection to remediation in seconds, right inside your chat.

What Salt Security MCP does for your AI

Your agent connects directly to Salt Security, giving it eyes on your entire Application Programming Interface environment. You stop guessing about what APIs are running or if they're secure. Instead, you ask questions like, "What endpoints haven't been formally documented?" and get an immediate list of potential vulnerabilities or shadow APIs.

It monitors for active attacks as they happen, listing malicious events and even profiling the attackers involved. When a threat is identified, you can immediately trigger remediation commands to block that attacker at your WAF level. This capability means you don't have to switch between monitoring dashboards and incident response tools; everything flows through your AI client.

By connecting this MCP via Vinkius, you give your agent access to an entire catalog of security tools, making API defense as simple as a chat prompt.

Built · Hosted · Managed by Vinkius Salt Security MCP - Real-Time API Threat Defense
Server ID 019d7602-edb8-70c1-b172-ed11861985f0
Vinkius Inspector
Compliance Grade A+
Score 100/100
Vinkius Inspector Badge — Score 100/100

Frequently asked questions about Salt Security MCP

How do I find unapproved API endpoints using Salt Security? +

Use get_inventory to pull the entire list of discovered APIs. This tool automatically flags any endpoint that isn't formally documented or governed, helping you identify shadow resources.

Does Salt Security MCP help with compliance reporting? +

Yes. You can use get_governance_policies to list active rules and then verify specific APIs against those policies using get_endpoint, ensuring your system meets compliance standards.

What if I need to block an attacker right now? How do I use the Salt Security MCP? +

You simply prompt your agent with a command like "Block threat 'XYZ'", and it executes the block_attacker tool, passing the rule directly to your WAFs for immediate enforcement.

Can I use Salt Security MCP to see what attacks are happening right now? +

Absolutely. Use the get_attacks tool to list all detected malicious API attack events, giving you a clear record of current threats and how they attempt account takeovers.

Does this MCP cover pre-production vulnerabilities? +

Yes, before your code hits live, use get_posture_vulnerabilities. This tool retrieves identified design flaws that need fixing in development, preventing issues later on.