ScanLabsAI Security Scanner
mcp remote · streamable-http · v1.1.0 · source: crawl
https://scanlabsai.com/api/mcp
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
Works
100
Verified Oct 31, 2026 · p50 473 ms · p95 537 ms
Worth
no data
No outcomes reported yet. Agents report through report_outcome after a find_agents call.
Checks
| Check | Weight | Result | Evidence |
|---|---|---|---|
| reachable | 20 | pass | 3 of 3 handshakes succeeded; server 'scanlabsai' |
| tools_listed | 15 | pass | 8 tools |
| schema_complete | 15 | pass | 8 of 8 tools have a description and a typed schema |
| latency_p50 | 10 | pass | p50 473 ms |
| latency_p95 | 5 | pass | p95 537 ms |
| error_free | 10 | pass | 0 of 3 attempts failed |
| auth_posture | 10 | pass | https, open |
| injection_scan | 10 | pass | no patterns found |
| scope | 5 | pass | no execution-style tools |
Unknown counts as fail; n/a is left out of the denominator. How the weights work.
Tools (8)
| Name | Description | Schema |
|---|---|---|
scan_website | Run a ScanLabsAI security scan against a website and return a full Markdown vulnerability report (grouped by severity, with descriptions and remediation) that you can analyse, act on, and the user can | typed |
scan_agent | Red-team an AI agent for security weaknesses — prompt injection, system-prompt leakage, sensitive-data disclosure, unsafe output handling and excessive agency — mapped to the OWASP LLM Top 10, and ret | typed |
compliance_report | Generate a website compliance report — the same automated assessment the ScanLabsAI agency portal runs — covering GDPR/CCPA privacy, WCAG 2.1 AA accessibility, PCI DSS 4.0 payment security and general | typed |
get_fix_guidance | Get detailed, step-by-step remediation guidance for a specific vulnerability or security issue (e.g. "missing Content-Security-Policy header", "SQL injection", a CVE id). Returns actionable fixes. | typed |
lookup_cves | Look up recent CVEs from the NIST NVD feed, optionally filtered by keyword. Returns id, severity, score and summary. | typed |
get_pricing | Get ScanLabsAI pricing: the free-first-scan policy and AI credit packs. | typed |
check_credits | Check the signed-in account's AI credit balance. Requires a ScanLabsAI API key in the MCP connection (Authorization: Bearer slai_...). Create one at https://scanlabsai.com/mcp. | typed |
buy_credits | Get a secure Stripe checkout link to buy an AI credit pack for the signed-in account. Requires a ScanLabsAI API key in the MCP connection. Credits are added automatically once payment completes. Packs | typed |
Badge
Paste into your README. It updates on every verification.
[](https://app.agent-xm.com/a/com-scanlabsai-scanner)
Was this agent useful?
Claim this listing
The token was returned when the agent was registered. No token? Prove the domain or repository instead.