@apviso/mcp
MCP server for interacting with the APVISO AI-powered penetration testing platform from Claude Code, Cursor, Windsurf, Codex, and other MCP-compatible tools.
Setup
1. Get your API key
Go to your APVISO dashboard → Settings → API Keys and create a new key.
2. Add to Claude Code
claude mcp add --transport stdio apviso \
--env APVISO_API_KEY=apvk_your_key_here \
-- npx -y @apviso/mcp
On Windows (not WSL):
claude mcp add --transport stdio apviso ^
--env APVISO_API_KEY=apvk_your_key_here ^
-- cmd /c npx -y @apviso/mcp
Alternative: manual config
Add to your .mcp.json (project-scoped) or ~/.claude.json (user-scoped):
{
"mcpServers": {
"apviso": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@apviso/mcp"],
"env": {
"APVISO_API_KEY": "apvk_your_key_here"
}
}
}
}
For team projects, use environment variable expansion in .mcp.json so each developer uses their own key:
{
"mcpServers": {
"apviso": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@apviso/mcp"],
"env": {
"APVISO_API_KEY": "${APVISO_API_KEY}"
}
}
}
}
3. Verify
Run /mcp inside Claude Code to check the server status.
Configuration
| Variable | Required | Default | Description |
|---|---|---|---|
APVISO_API_KEY |
Yes | — | Your API key (starts with apvk_) |
APVISO_API_URL |
No | https://apviso.com/api |
API base URL |
Tools
Targets
| Tool | Description |
|---|---|
list_targets |
List all registered targets |
get_target |
Get target details |
create_target |
Register a new domain |
verify_target |
Verify domain ownership (DNS, file, or meta tag) |
get_verification_instructions |
Get verification steps for a target |
delete_target |
Remove a target |
Scans
| Tool | Description |
|---|---|
list_scans |
List scans with optional status filter |
get_scan |
Get scan details and status |
create_scan |
Start a new penetration test (costs credits) |
Findings
| Tool | Description |
|---|---|
list_findings |
List vulnerabilities for a scan |
update_finding_status |
Mark findings as fixed, accepted risk, etc. |
Reports
| Tool | Description |
|---|---|
get_report |
Get the full pentest report as markdown |
Schedules
| Tool | Description |
|---|---|
list_schedules |
List recurring scan schedules |
get_schedule |
Get schedule details |
create_schedule |
Set up recurring scans (Business/Enterprise) |
update_schedule |
Modify a schedule |
delete_schedule |
Remove a schedule |
Quota
| Tool | Description |
|---|---|
get_quota |
Check remaining credits and billing period |
License
MIT
