Read-only access to your Auditon vulnerability scans: findings, endpoints, reports and changes.
Connect Remote server
claude mcp add --transport http assessments https://auditon.co/mcp --header "Authorization: Bearer <YOUR_API_KEY>"
{
"mcpServers": {
"assessments": {
"url": "https://auditon.co/mcp",
"headers": {
"Authorization": "Bearer <YOUR_API_KEY>"
}
}
}
}
{
"servers": {
"assessments": {
"type": "http",
"url": "https://auditon.co/mcp",
"headers": {
"Authorization": "Bearer <YOUR_API_KEY>"
}
}
}
}
Settings > Connectors > Add custom connector
URL: https://auditon.co/mcp
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools 6 found in our last check
list_endpointsHosts assessed in this workspace, with open findings by severity and the most recent scan. Start here.
list_scansScans, newest first: type, status, rating and coverage. With an endpoint, rating, findings and coverage are for that endpoint only.
get_reportOne scan as structured data: rating, coverage gaps, findings, items requiring verification, accepted risks, dismissed false positives and passed controls. Read "interpretation" before drawing conclusions. Set detail=true for descriptions and remediation.
list_findingsCurrent findings across all scans, most severe first. Defaults to open findings; potential (unconfirmed) matches are included and marked by assurance.
get_findingFull detail for one finding: description, impact, remediation, references, evidence, analyst decision and its history across scans.
compare_scansWhat changed on an endpoint between two scans: appeared, resolved, not reassessed (the check did not complete, so status is unknown) and severity changes. Without scan ids, compares the endpoint's two most recent scans.
Headers
| Name | Description |
|---|---|
AuthorizationRequired, secret | Auditon API key, created under API keys in the client portal |
Details
| Endpoint | https://auditon.co/mcp (Streamable HTTP) |
| First published | 18 Oct 2026 |
| Last updated | 18 Oct 2026 |
| Registry name | co.auditon/assessments |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
