MCP

Paste this URL into your AI client to start setup:

https://slatesecurity.ai/mcp

Or open the install page directly. Agents can also fetch https://slatesecurity.ai/api/mcp/install for structured config, including agentInstructions and the hosted endpoint https://mcp.slatesecurity.ai.

• A Slate API key from Settings → API keys
• Authorization to scan the targets you request

Slate hosts a remote MCP server — no Node.js or npx required. Add this URL and your API key as a Bearer token:

{
  "mcpServers": {
    "slate": {
      "url": "https://mcp.slatesecurity.ai",
      "headers": {
        "Authorization": "Bearer <your-api-key>"
      }
    }
  }
}

MCP endpoint: https://mcp.slatesecurity.ai

Alternatively, run the stdio server locally via npx (requires Node.js 20+):

{
  "mcpServers": {
    "slate": {
      "command": "npx",
      "args": [
        "-y",
        "@slate-security/mcp-server"
      ],
      "env": {
        "SLATE_API_KEY": "<your-api-key>",
        "SLATE_API_URL": "https://api.slatesecurity.ai"
      }
    }
  }
}

• slate_list_scan_findings — List vulnerabilities for a scan with remediation steps.
• slate_get_finding — Get full finding detail including AI-ready fix prompt.
• slate_list_targets — List all scan targets in the workspace with scan counts.
• slate_list_scans — List scans, optionally filtered to one target.
• slate_scan_domain — Create a target, start a scan, and optionally wait for findings.
• slate_create_target — Create or return an existing scan target for a URL.
• slate_start_scan — Start a scan for an existing target (uses one credit).
• slate_get_scan — Get scan status, progress, and findings.

Use slate_list_targets and slate_list_scans to discover existing targets and scan history. slate_scan_domain is the easiest starting point for a new scan.

• "Use Slate to scan api.example.com and list high-severity findings."
• "Start a Slate scan on staging.myapp.com, wait for completion, and summarize remediation priorities."
• "List all findings for scan abc123 and fetch the AI fix prompt for each critical one."
• "Check scan abc123 status in Slate and tell me if it finished."

The hosted MCP server runs at https://mcp.slatesecurity.ai. A local stdio fallback is also published as @slate-security/mcp-server.