Skip to main content
Glama
Apviso

APVISO MCP Server

by Apviso
OverviewSchemaRelated ServersScoreDiscussions
TypeScript
Remote

@apviso/mcp

MCP server for interacting with the APVISO AI-powered penetration testing platform from Claude Code, Cursor, Windsurf, Codex, and other MCP-compatible tools.

Setup

1. Get your API key

Go to your APVISO dashboard → Settings → API Keys and create a new key.

2. Add to Claude Code

claude mcp add --transport stdio apviso \
  --env APVISO_API_KEY=apvk_your_key_here \
  -- npx -y @apviso/mcp

On Windows (not WSL):

claude mcp add --transport stdio apviso ^
  --env APVISO_API_KEY=apvk_your_key_here ^
  -- cmd /c npx -y @apviso/mcp

Alternative: manual config

Add to your .mcp.json (project-scoped) or ~/.claude.json (user-scoped):

{
  "mcpServers": {
    "apviso": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "@apviso/mcp"],
      "env": {
        "APVISO_API_KEY": "apvk_your_key_here"
      }
    }
  }
}

For team projects, use environment variable expansion in .mcp.json so each developer uses their own key:

{
  "mcpServers": {
    "apviso": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "@apviso/mcp"],
      "env": {
        "APVISO_API_KEY": "${APVISO_API_KEY}"
      }
    }
  }
}

3. Verify

Run /mcp inside Claude Code to check the server status.

Related MCP server: MCP-PST-Server

Configuration

Variable

Required

Default

Description

APVISO_API_KEY

Yes

—

Your API key (starts with apvk_)

APVISO_API_URL

No

https://apviso.com/api

API base URL

Tools

Targets

Tool

Description

list_targets

List all registered targets

get_target

Get target details

create_target

Register a new domain

verify_target

Verify domain ownership (DNS, file, or meta tag)

get_verification_instructions

Get verification steps for a target

delete_target

Remove a target

Scans

Tool

Description

list_scans

List scans with optional status filter

get_scan

Get scan details and status

create_scan

Start a new penetration test (costs credits)

Findings

Tool

Description

list_findings

List vulnerabilities for a scan

update_finding_status

Mark findings as fixed, accepted risk, etc.

Reports

Tool

Description

get_report

Get the full pentest report as markdown

Schedules

Tool

Description

list_schedules

List recurring scan schedules

get_schedule

Get schedule details

create_schedule

Set up recurring scans (Business/Enterprise)

update_schedule

Modify a schedule

delete_schedule

Remove a schedule

Quota

Tool

Description

get_quota

Check remaining credits and billing period

License

MIT

Install Server
A
license - permissive license
A
quality
C
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
0dRelease cycle
3Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Tools

View all tools

Related MCP Servers

  • ZAP MCP Server

    LisBerndt
    A
    license
    -
    quality
    C
    maintenance
    Integrates OWASP ZAP security testing with AI assistants through MCP, enabling automated vulnerability scanning and AI-powered security analysis during development. Supports multiple scan types including active, passive, and AJAX spider scans with real-time status updates.
    5
    MIT

  • MCP-PST-Server

    arch3rPro
    A
    license
    -
    quality
    -
    maintenance
    Enables AI-assisted penetration testing by connecting MCP clients to a Windows API server for executing penetration testing tools like nmap, ffuf, nuclei, and other security tools. Allows AI agents to perform automated security assessments, solve CTF challenges, and assist with ethical hacking tasks through natural language commands.
    10

  • Veracode MCP

    ChinYoong
    F
    license
    -
    quality
    D
    maintenance
    Enables interaction with the Veracode platform to perform security tasks like running SAST scans, checking SCA vulnerabilities, and retrieving CVE information. It allows AI assistants to manage scan workflows, from zipping source code to analyzing scan results through natural language.
  • Sekrd Security Scanner by sekrdcom

    Sekrd Security Scannerofficial

    sekrdcom
    F
    license
    A
    quality
    D
    maintenance
    Enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.
    3

View all related MCP servers

Related MCP Connectors

  • mcp-server

    MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.

  • Frogeye Security Scanner

    Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.

  • Security Intel MCP

    CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Apviso/apviso-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server