Stackhawk
Let your agent start and inspect StackHawk DAST scans so you catch web app vulnerabilities before customers do.
Overview
StackHawk MCP is an MCP server for the Ship phase that lets your agent interact with StackHawk’s security scanning platform using an API key.
What is this MCP server?
- MCP bridge to StackHawk’s security scanning platform
- PyPI package stackhawk-mcp v1.1.1 with stdio transport
- Requires STACKHAWK_API_KEY for authenticated scan operations
- GitHub source at stackhawk/stackhawk-mcp for self-hosted agent setups
- Agent-driven workflow for triggering and reading scan results
- PyPI package stackhawk-mcp version 1.1.1
- stdio transport via published Python package
- Open-source repository: github.com/stackhawk/stackhawk-mcp
What problem does it solve?
Solo builders forget to run DAST before ship and lose hours triaging vulnerabilities without agent-accessible scan data.
Who is it for?
Indie teams shipping web APIs or SaaS frontends who already use or plan to use StackHawk and want security scans on-demand from the agent.
Skip if: Static sites with no attack surface, mobile-only apps outside StackHawk coverage, or builders who refuse to run external DAST on staging URLs.
What do I get? / Deliverables
Once stackhawk-mcp is installed with STACKHAWK_API_KEY, your agent can drive StackHawk scans and surface findings inside your dev workflow.
- Agent-initiated StackHawk scan interactions
- Security findings accessible for summarization and fix planning in the agent session
Recommended MCP Servers
Journey fit
How it compares
DAST platform MCP connector, not a local SAST linter skill or generic OWASP cheat sheet.
Common Questions / FAQ
Who is StackHawk MCP for?
Solo and small-team builders who deploy web applications and want Claude Code, Cursor, or similar agents to operate StackHawk scans via MCP.
When should I use StackHawk MCP?
Use it in ship → security when you have a staging or production URL and need agent-assisted dynamic scanning before or after releases.
How do I add StackHawk MCP to my agent?
Install the stackhawk-mcp PyPI package (stdio), set STACKHAWK_API_KEY, and register the server in your MCP client per the stackhawk/stackhawk-mcp repository instructions.