Create a login recording or check a HAR file with Astra MCP

Last updated: November 2, 2026

This article explains how to use Astra MCP to create a login recording for authenticated scanning and to check a HAR file before it is used for a scan.

Create a login recording

A login recording lets Astra scan the pages behind a sign-in. The assistant guides the steps, checks the recording, and provides the file to upload in Astra.

  1. Ask the assistant to create a login recording, for example: "Create a login recording for https://app.example.com/login."

  2. Answer the assistant's questions, such as the login URL and the sign-in type used by the application.

  3. Wait while the assistant analyzes the login page, creates the recording and replays it to check that it works. This usually takes about 5 to 10 minutes.

  4. Upload the file that the assistant provides in Astra under Target Setup > User Credentials > Login Recording.

Note

If the site uses a WAF or bot protection, allow the recording session through it.

Tools used:

Tool name

Type

What it does

Prompt

login_recording_intake

Read

Starts a login recording and collects what is needed first.

“Create a login recording for https://app.example.com/login.”

login_recording_get_guide

Read

Loads the step-by-step guide for the chosen sign-in type.

“Show the guide for recording a magic link login.”

Check a HAR file

The HAR check finds common problems in a HAR file before it is used for a scan, and helps fix them. The check runs on the user's own computer, so the file is never uploaded.

  1. Open an AI tool that can run commands locally, such as Cursor, VS Code or Claude Code.

  2. Ask the assistant to check the file, for example: "Check whether my recording.har file is ready for a scan."

  3. Provide the path to the HAR file when the assistant asks for it.

  4. Review the result and fix any problems that the assistant reports before using the file for a scan.

Note

The check runs on the user's computer with Node.js, so it needs an AI tool that can run commands locally, such as Cursor, VS Code or Claude Code. The HAR file is never sent to Astra MCP, because it can contain session tokens and cookies.

Tools used:

Tool name

Type

What it does

Prompt

har_validator_intake

Read

Starts a HAR file check.

“Check whether my recording.har file is ready for a scan.”

har_validator_get_guide

Read

Loads the HAR check guide or the check script.

“Show the HAR file rules Astra checks.”

For anything not covered here, contact help@getastra.com.