Introduction to Astra MCP

Last updated: November 2, 2026

Astra MCP connects an AI assistant, such as ChatGPT, Claude, Cursor or VS Code, to an Astra account. Once connected, the assistant can read targets, scans, vulnerabilities and reports, and can take selected actions in Astra, such as starting a scan or requesting a rescan, from a chat prompt.

Astra MCP is a remote server that follows the Model Context Protocol (MCP), an open standard that lets AI assistants use outside tools. The assistant picks the right Astra tool for each request, runs it with the signed-in user's Astra account, and shows the answer in the chat.

Server URL:

https://mcp.getastra.com/mcp

What Astra MCP can do

Check security status: list targets, see the latest scan on a target, and get vulnerability counts by severity and status.
Fix vulnerabilities from the editor: pull a remediation brief with the description, proof of concept and suggested fix, read the evidence (affected URLs and parameters), and change the code in the same session.
Move a vulnerability through its workflow: submit it for review after a fix, accept the risk, reopen it, request help from the security team, or mark it as a false positive.
Run and manage scans: start an automated scan, cancel a running scan, and create, pause or update recurring scan schedules.
Request rescans: check whether a vulnerability can be rescanned and request a rescan for it.
Generate reports: generate a Full Report, Management Report and other report types, delivered to the Reports tab in Astra and, if chosen, by email.
Prepare scan setup: create a login recording for authenticated scanning and check a HAR file before it is used for a scan.
Look up history and account details: see who changed what in the activity log, and review workspaces, subscriptions and CI/CD integrations.

Who it is for

Developers who fix vulnerabilities and want the vulnerability details next to their code in Cursor, VS Code or Claude Code.
Security and engineering leads who want quick answers about open vulnerabilities, scan progress and reports from ChatGPT or Claude.
Teams that set up authenticated scanning and want help creating a login recording or checking a HAR file.

Access

Any Astra user can connect Astra MCP.
No API key is needed. The connection uses the same Astra sign-in as the dashboard.
Some actions depend on the plan and on the user's role in Astra. For example, the report types and scan types offered through Astra MCP are the same ones offered in the dashboard for that account.

Important

AI output can be wrong. Review the assistant's answer before acting on it, especially before starting a scan, changing a vulnerability status or deleting a schedule.

Astra MCP articles

Get started

Connect Astra MCP to your AI tool: setup steps for ChatGPT Web, the ChatGPT App, Claude Desktop, Cursor, VS Code, Claude Code and other AI tools.
Astra MCP security, permissions and data: how requests flow, what the assistant can read and change, and how sign-in works.

Use Astra MCP

Astra MCP tools reference: every Astra MCP tool by area, with its type and an example prompt.
Example prompts and workflows for Astra MCP: ready-to-use prompts, multi-step workflows and tips for better results.
Create a login recording or check a HAR file with Astra MCP: prepare authenticated scanning with the help of the assistant.

Troubleshooting

For anything not covered here, contact help@getastra.com.