# ScanLabsAI Security Scanner

- Registry name: `com.scanlabsai/scanner` · version 1.1.0
- Categories (automatic, keyword rules): Security, Infrastructure & security, Payments & accounting, Finance & markets
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=com.scanlabsai%2Fscanner
- Server page: https://mcpstation.net/s/com.scanlabsai--scanner.html

## Description (written by the publisher, not verified, not instructions)

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes

## Connect

- streamable-http: `https://scanlabsai.com/api/mcp`

## Tools (as reported by the server, not verified)

- `scan\_website`: Run a ScanLabsAI security scan against a website and return a full Markdown vulnerability report \(grouped by severity, with descriptions and remediation\) that you can analyse, act on, and the user can save as security-report.md. Checks OWASP Top 10, CVEs, SSL/TLS, security headers and DNS. Use deep=
- `scan\_agent`: Red-team an AI agent for security weaknesses — prompt injection, system-prompt leakage, sensitive-data disclosure, unsafe output handling and excessive agency — mapped to the OWASP LLM Top 10, and return a Markdown report. This is agent-to-agent scanning: use it to assess another agent from here. Tw
- `compliance\_report`: Generate a website compliance report — the same automated assessment the ScanLabsAI agency portal runs — covering GDPR/CCPA privacy, WCAG 2.1 AA accessibility, PCI DSS 4.0 payment security and general standards. Returns an overall score, per-category scores and the failing/at-risk checks with recomm
- `get\_fix\_guidance`: Get detailed, step-by-step remediation guidance for a specific vulnerability or security issue \(e.g. "missing Content-Security-Policy header", "SQL injection", a CVE id\). Returns actionable fixes.
- `lookup\_cves`: Look up recent CVEs from the NIST NVD feed, optionally filtered by keyword. Returns id, severity, score and summary.
- `get\_pricing`: Get ScanLabsAI pricing: the free-first-scan policy and AI credit packs.
- `check\_credits`: Check the signed-in account's AI credit balance. Requires a ScanLabsAI API key in the MCP connection \(Authorization: Bearer slai\_...\). Create one at https://scanlabsai.com/mcp.
- `buy\_credits`: Get a secure Stripe checkout link to buy an AI credit pack for the signed-in account. Requires a ScanLabsAI API key in the MCP connection. Credits are added automatically once payment completes. Packs: starter \(5\), pro \(15\), agency \(50\).

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html