StackHawk Connector for AI agents.
10 live capabilities
Run automated DAST security scans and triage vulnerabilities in real time.
Waiting for input…
Why people use StackHawk
StackHawk DAST Security Triage for DevSecOps
With this Connector, you just tell your AI client to find the latest high-risk alerts and triage them. It pulls the data, summarizes the issues, and updates the status in StackHawk in one go.
What Vinkius changes
You get to manage your DAST security lifecycle through a chat interface instead of a complex dashboard.
Use it from Claude, ChatGPT, Cursor or another AI client you already have.
One account · 5,900+ Connectors
- Real-world use case 01
Checking for regressions after a push
A developer just pushed a new microservice and wants to check for regressions.
- Real-world use case 02
Summarizing ongoing security scans
A security lead needs to know the status of all ongoing scans.
- Real-world use case 03
Cleaning up a high volume of alerts
A DevSecOps engineer is overwhelmed by a high volume of alerts.
Complete set · 10capabilities
The complete StackHawk capability set.
These are the exact actions your AI can choose when you ask it to work with StackHawk.
01—04
4 capabilities in this set.
Part of 10 available through StackHawk.
- 01 Capability
List scans
View all past and current DAST scan executions for an application. It provides scan IDs and high-level alert counts.
- 02 Capability
Login
Authenticate with StackHawk to get a bearer token for all other actions. This is the first step for any authenticated request.
- 03 Capability
Get application details
Get the full configuration for a specific StackHawk application. This provides a deep look at your app settings.
- 04 Capability
Get organization details
View your organization details and current subscription tier. This is useful for high-level account auditing.
05—07
3 capabilities in this set.
Part of 10 available through StackHawk.
- 05 Capability
Get scan alerts
Download individual security alerts found during a specific scan. This lets you see every vulnerability in detail.
- 06 Capability
Get scan results
Pull detailed metadata and results for a specific DAST scan. This provides the granular data needed for deep audits.
- 07 Capability
List applications
Pull a list of all registered DAST applications in your organization. This helps you see your entire software footprint.
08—10
3 capabilities in this set.
Part of 10 available through StackHawk.
- 08 Capability
List environments
See all configured environments like staging or production for an app. Use this to target specific deployment stages.
- 09 Capability
List api keys
List all configured API keys for auditing and security hygiene. Use this to ensure no keys are left exposed or unused.
- 10 Capability
Triage alert
Update a security alert status to risk accepted, false positive, or in progress. This helps clean up your alert queue.
Set up in minutes
One URL. Then ask StackHawk to work.
Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use StackHawk from the conversation.
Choose your client
Live previewAdvanced clients IDE · CLI
Claude · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_jum2d82i9iEL2aHAYqrgxEwcXG8hsTWADiZhQ3ew/mcp - Step 01
Open Connectors
In Claude Web or Claude Desktop, open Settings and choose Connectors.
- Step 02
Add the URL
Choose Add custom connector, name it StackHawk, and paste the URL above.
- Step 03
Turn it on in chat
Select +, open Connectors, and enable StackHawk for the conversation.
ChatGPT · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_jum2d82i9iEL2aHAYqrgxEwcXG8hsTWADiZhQ3ew/mcp - Step 01
Open MCP settings
On desktop, open Settings and MCP servers. On web, open your workspace app or connector settings.
- Step 02
Add the URL
Choose Add server with Streamable HTTP, or create a custom MCP app, then paste the StackHawk URL.
- Step 03
Save and start
Save the connection and enable StackHawk in your conversation. Desktop may ask you to restart once.
Cursor · IDE configuration
Advanced setup
{
"mcpServers": {
"stackhawk": {
"url": "https://edge.vinkius.com/vk_preview_jum2d82i9iEL2aHAYqrgxEwcXG8hsTWADiZhQ3ew/mcp"
}
}
}- Step 01
Open MCP Settings
Press Cmd+Shift+P (macOS) or Ctrl+Shift+P (Windows/Linux) → search "MCP Settings"
- Step 02
Add the server config
Paste the JSON configuration above into the mcp.json file that opens
- Step 03
Save the file
Cursor will automatically detect the new Connector
- Step 04
Start using StackHawk
Open Agent mode in chat and ask: "Using StackHawk, help me...". 10 tools available
VS Code Copilot · IDE configuration
Advanced setup
{
"mcpServers": {
"stackhawk": {
"url": "https://edge.vinkius.com/vk_preview_jum2d82i9iEL2aHAYqrgxEwcXG8hsTWADiZhQ3ew/mcp"
}
}
}- Step 01
Create MCP config
Create a .vscode/mcp.json file in your project root
- Step 02
Add the server config
Paste the JSON configuration above
- Step 03
Enable Agent mode
Open GitHub Copilot Chat and switch to Agent mode using the dropdown
- Step 04
Start using StackHawk
Ask Copilot: "Using StackHawk, help me...". 10 tools available
Windsurf · IDE configuration
Advanced setup
{
"mcpServers": {
"stackhawk": {
"url": "https://edge.vinkius.com/vk_preview_jum2d82i9iEL2aHAYqrgxEwcXG8hsTWADiZhQ3ew/mcp"
}
}
}- Step 01
Open MCP Settings
Go to Settings → MCP Configuration or press Cmd+Shift+P and search "MCP"
- Step 02
Add the server
Paste the JSON configuration above into mcp_config.json
- Step 03
Save and reload
Windsurf will detect the new server automatically
- Step 04
Start using StackHawk
Open Cascade and ask: "Using StackHawk, help me...". 10 tools available
Cline · IDE configuration
Advanced setup
{
"mcpServers": {
"stackhawk": {
"url": "https://edge.vinkius.com/vk_preview_jum2d82i9iEL2aHAYqrgxEwcXG8hsTWADiZhQ3ew/mcp"
}
}
}- Step 01
Open Cline MCP Settings
Click the Connectors icon in the Cline sidebar panel
- Step 02
Add remote server
Click "Add Connector" and paste the configuration above
- Step 03
Enable the server
Toggle the server switch to ON
- Step 04
Start using StackHawk
Ask Cline: "Using StackHawk, help me...". 10 tools available
Claude Code · Terminal command
Advanced setup
claude mcp add stackhawk --transport http "https://edge.vinkius.com/vk_preview_jum2d82i9iEL2aHAYqrgxEwcXG8hsTWADiZhQ3ew/mcp"- Step 01
Install Claude Code
Run npm install -g @anthropic-ai/claude-code if not already installed
- Step 02
Add the Connector
Run the command above in your terminal
- Step 03
Verify the connection
Run claude mcp to list connected servers, or type /mcp inside a session
- Step 04
Start using StackHawk
Ask Claude: "Using StackHawk, show me...". 10 tools are ready
Where the request belongs
Work StackHawk can move forward.
This is for security engineers who are tired of manual triage and developers who want to see security results without leaving their terminal.
DevSecOps Engineer
Triages alerts and runs scans during deployment cycles to ensure code is safe.
Security Architect
Audits organizational API keys and environment configurations for compliance.
Backend Developer
Checks for specific security regressions in new microservices immediately after deployment.
Build the capability set
Add more capabilities.
Each Connector adds new actions and data without changing how you work.
Browse Connectors42Crunch
Automate API security testing via 42Crunch. manage collections, trigger audits, run conformance scans, and retrieve security reports directly from any AI agent.
Tenable
Manage Tenable Vulnerability Management scans, inspect cloud assets, and triage CVEs natively via your AI agent.
HCL AppScan
Manage security scans and vulnerabilities with HCL AppScan. track issues and audit applications via AI.
Beagle Security
Scan your web applications for vulnerabilities, generate penetration test reports, and strengthen your security posture proactively.
Equixly
Automate API security testing via Equixly. manage target services, trigger autonomous AI pentests, and audit vulnerability findings directly from any AI agent.
Acunetix 360
Automated web vulnerability scanning. manage scans, track issues, and audit security via AI.
Bring your own AI
Change the model, client or framework. Keep StackHawk connected.
-
Claude -
ChatGPT -
Gemini -
Cursor -
VS Code -
Windsurf -
ZCode -
Cline -
Zed -
Continue -
Kiro -
Roo Code -
Zencoder -
Goose -
Void -
Augment Code -
Amp -
Qodo -
Tabnine -
Pieces -
Sourcegraph Cody -
JetBrains -
Warp -
Amazon Q -
Antigravity -
BoltAI -
Raycast -
Jan -
LM Studio -
AnythingLLM -
Open WebUI -
Msty -
Cherry Studio -
LibreChat -
TypingMind -
Chorus -
5ire -
n8n -
LangChain -
LlamaIndex -
CrewAI -
Vercel AI SDK
Before you connect
Questions about StackHawk.
The practical details behind the request, access and result.
How does the StackHawk MCP help with security triage?
It lets you use natural language to update the status of security alerts. You can tell your AI to mark items as false positives or accepted risks without having to manually click through the StackHawk dashboard.
Can I use StackHawk MCP to run automated scans?
Yes. You can instruct your AI client to initiate new DAST scans across your different environments, like staging or production, directly from your chat interface.
Does StackHawk MCP support multiple environments?
It does. You can list and inspect different environments for your applications, allowing your agent to target specific ones for security testing.
Is it safe to use my API token with StackHawk MCP?
Yes, the Connector handles your StackHawk API token securely to authenticate your requests. You provide the token in your configuration, and it's used to perform actions on your behalf.
Can I audit my API keys using this Connector?
You can. The Connector includes a capability to list all configured API keys in your organization, which makes it easy to check for security hygiene and audit your credentials.
How do I see the results of a specific security scan?
Just ask your AI client to pull the results for a specific scan. It will retrieve the detailed metadata and vulnerability information from StackHawk and summarize it for you.
Are scans executed locally or in the cloud?
Scans run on the StackHawk cloud infrastructure. The Connector integration only triggers and monitors them. no heavy processing happens in your AI context.
Why is the `login` step required?
The StackHawk API uses short-lived Bearer tokens. The login capability exchanges your API key for a session token that authenticates all subsequent requests.
Can the agent triage alerts automatically?
Yes. Use triage_alert to mark specific vulnerabilities as false positives, accepted risks, or confirmed issues. Each triage action targets a single alert by ID.
One connection away
Give your agent a direct line to StackHawk.
Connect StackHawk once. Keep it beside 5,900+ managed Connectors when the next task needs more.
Explore every Connector No credit card required · Free tier available