ScanLabsAI Security Scanner

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

• Connection: Computer or cloud
• Transport: stdio, Streamable HTTP
• Category: Cybersecurity
• You need to fill in: SCANLABS_API_KEY

Install

Pick the AI app you use, then copy the settings.

You need

• Runs in the cloudNothing to install; it connects over the internet
• npmNode.js installed (for the npx command)

Which app do you use?

https://scanlabsai.com/api/mcp

{
  "mcpServers": {
    "scanner": {
      "command": "npx",
      "args": [
        "-y",
        "@scanlabsai/mcp-server"
      ],
      "env": {
        "SCANLABS_API_KEY": "your-value"
      }
    }
  }
}

claude mcp add --transport http scanner https://scanlabsai.com/api/mcp

claude mcp add scanner --env SCANLABS_API_KEY=your-value -- npx -y @scanlabsai/mcp-server

{
  "mcpServers": {
    "scanner": {
      "url": "https://scanlabsai.com/api/mcp"
    }
  }
}

{
  "mcpServers": {
    "scanner": {
      "command": "npx",
      "args": [
        "-y",
        "@scanlabsai/mcp-server"
      ],
      "env": {
        "SCANLABS_API_KEY": "your-value"
      }
    }
  }
}

{
  "servers": {
    "scanner": {
      "type": "http",
      "url": "https://scanlabsai.com/api/mcp"
    }
  }
}

{
  "servers": {
    "scanner": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@scanlabsai/mcp-server"
      ],
      "env": {
        "SCANLABS_API_KEY": "your-value"
      }
    }
  }
}

https://scanlabsai.com/api/mcp

Your choice stays on this device in a cookie; no account needed.

Values you fill in

• SCANLABS_API_KEY secret env
  Your ScanLabsAI API key from https://scanlabsai.com/mcp. Optional: without it you get one free scan per website.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Tool names and descriptions exactly as the server reported them on Nov 9, 2026. The maker wrote them, not us; we show them as plain text.

• scan_website

  Run a ScanLabsAI security scan against a website and return a full Markdown vulnerability report (grouped by severity, with descriptions and remediation) that you can analyse, act on, and the user can save as security-report.md. Checks OWASP Top 10, CVEs, SSL/TLS, security header

• scan_agent

  Red-team an AI agent for security weaknesses — prompt injection, system-prompt leakage, sensitive-data disclosure, unsafe output handling and excessive agency — mapped to the OWASP LLM Top 10, and return a Markdown report. This is agent-to-agent scanning: use it to assess another

• compliance_report

  Generate a website compliance report — the same automated assessment the ScanLabsAI agency portal runs — covering GDPR/CCPA privacy, WCAG 2.1 AA accessibility, PCI DSS 4.0 payment security and general standards. Returns an overall score, per-category scores and the failing/at-ris

• get_fix_guidance

  Get detailed, step-by-step remediation guidance for a specific vulnerability or security issue (e.g. "missing Content-Security-Policy header", "SQL injection", a CVE id). Returns actionable fixes.

• lookup_cves

  Look up recent CVEs from the NIST NVD feed, optionally filtered by keyword. Returns id, severity, score and summary.

• get_pricing

  Get ScanLabsAI pricing: the free-first-scan policy and AI credit packs.

• check_credits

  Check the signed-in account's AI credit balance. Requires a ScanLabsAI API key in the MCP connection (Authorization: Bearer slai_...). Create one at https://scanlabsai.com/mcp.

• buy_credits

  Get a secure Stripe checkout link to buy an AI credit pack for the signed-in account. Requires a ScanLabsAI API key in the MCP connection. Credits are added automatically once payment completes. Packs: starter (5), pro (15), agency (50).

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 10, 2026

• ! Caution

  Maker matches the repo

  The registry lists no source repo, so we cannot match the publisher (scanlabsai.com) to the code

• … Not checked yet

  Still maintained

  We have not read this repo from GitHub yet

• … Not checked yet

  Has a licence

  We have not read this repo from GitHub yet

• ✓ Pass

  Endpoint responds

  Responded in 612 ms (HTTP 200)

• – Not applicable

  Sign-in with OAuth

  No sign-in needed

• ✓ Pass

  No hidden instructions in tool descriptions

  Read 8 tool descriptions and found no hidden instructions to the AI

Compared with others in Cybersecurityi

• More stars than 0% of the other 1012 servers in this category
• Published to the registry more recently than 43% of the other 1012 servers in this category
• Basic checks equal to or better than 34% of the other 1012 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

README from the maker

No README found in the repo