English Français العربية

ScanLabsAI Security Scanner

Official registry Security

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes

Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http scanlabsai-security-scanner 'https://scanlabsai.com/api/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "scanlabsai-security-scanner": {
            "type": "http",
            "url": "https://scanlabsai.com/api/mcp"
        }
    }
}
NPM package @scanlabsai/mcp-server
Claude Code 
claude mcp add scanlabsai-security-scanner -e 'SCANLABS_API_KEY=<your scanlabs_api_key>' -- npx -y @scanlabsai/mcp-server@1.0.0
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "scanlabsai-security-scanner": {
            "command": "npx",
            "args": [
                "-y",
                "@scanlabsai/mcp-server@1.0.0"
            ],
            "env": {
                "SCANLABS_API_KEY": "<your scanlabs_api_key>"
            }
        }
    }
}

Environment variables

  • SCANLABS_API_KEY secret Your ScanLabsAI API key from https://scanlabsai.com/mcp. Optional: without it you get one free scan per website.

Frequently asked questions

What is ScanLabsAI Security Scanner?

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes

How do I install ScanLabsAI Security Scanner?

It runs as a remote server. In Claude Code: claude mcp add --transport http scanlabsai-security-scanner 'https://scanlabsai.com/api/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does ScanLabsAI Security Scanner need an API key?

Yes. It expects SCANLABS_API_KEY, which you set in its configuration.

Who maintains ScanLabsAI Security Scanner?

It is published by com.scanlabsai. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.