Skip to main content

MCP

Connect Claude Code, Cursor, or other MCP clients to AuditAgent so they can run scans for you whenever you need.

MCP server URL: https://api.auditagent.nethermind.io/mcp

  1. Add AuditAgent as a remote MCP server with the URL above. In your config file, it should look like this:
{
  "mcpServers": {
    "auditagent": {
      "type": "http",
      "url": "https://api.auditagent.nethermind.io/mcp"
    }
  }
}
  1. When you try to use it for the first time after adding it to your config, your client should automatically realize that it needs authentication and ask you to authenticate by giving you an option to open your browser.
  2. Once your browser is open, you'll be asked to login to your AuditAgent account if you're not already logged in.
  3. On the consent page, pick the default workspace and connect. Your client will receive a Bearer token and can call tools across all your workspaces (You can always switch your workspace by asking the agent).

Manual setup (fallback for authentication)​

If your client doesn't support automatic authentication, you can use the instructions below to set it up manually.

  1. While logged in to your AuditAgent account, open MCP Setup.
  2. Generate a token and copy it (shown once).
  3. Configure your client using the following settings:
{
  "mcpServers": {
    "auditagent": {
      "type": "http",
      "url": "https://api.auditagent.nethermind.io/mcp",
      "headers": {
        "Authorization": "Bearer <token>"
      }
    }
  }
}

Tools your client will get access to​

Workspace Tools​

  • info: Fetches your current workspace's name, subscription type, and spendable credits
  • list_workspaces: Lists all workspaces you have access to
  • switch_workspace: Switches you to a different workspace

Scan Tools​

  • prepare_zip_upload: Allows your agent to upload a ZIP file containing the data it wants to run the scan on.
  • scan: Triggers a scan using the ZIP file your agent uploaded. You will get an email once the scan is complete with the results.
  • scan_results: Retrieves a scan by scan_id. While the scan is unfinished, it returns scan_status, message, and progress. Completed scans return the report and invariants.

Finding descriptions in results​

Completed scan_results reports use the same Markdown string for each finding's description as the direct API and JSON report downloads. The string includes available narrative sections and supporting source excerpts, but omits recommendations. Older text descriptions are also returned as strings. See finding details for more information.