Astra MCP tools reference

Last updated: November 2, 2026

This article lists the tools that Astra MCP offers, grouped by area, with the type of each tool and an example prompt.

The assistant picks the tools on its own based on the request, so there is no need to name a tool in the prompt. The tool names below are the ones AI tools show when asking to run a tool. Each tool is labeled Read, Write or Delete; see Astra MCP security, permissions and data for what each label means.

Note

List tools return up to 100 items per page on most lists. To see more items, ask the assistant for the next page.

Key terms

Term	Meaning in Astra
Target	The application, API, cloud account or mobile app that Astra tests.
Scan	One test run on a target. This includes automated scans and pentests.
Vulnerability	A tracked security issue found on a target. It has a severity (critical, high, medium, low or info) and a status.
Finding	A concrete occurrence of a vulnerability, such as one affected URL and parameter, with its evidence. One vulnerability can have many findings.
Rescan	A new check of a vulnerability after a fix, to confirm it is closed.
Schedule	A recurring scan on one target, the same as Automations in the dashboard.
Report	A document generated from targets or scans, such as a Full Report or an Engagement Letter, available in the Reports tab.

Targets

Find the targets the user has access to and read their setup. Most other requests start here, because scans, vulnerabilities and schedules belong to a target.

Tool name	Type	What it does	Prompt
`target_list`	Read	Lists the targets the user can access.	“List all active targets in my account.”
`target_get`	Read	Gets one target with its scope, state and details.	“Show the scope and setup of the app.example.com target.”

Scans

Check scan progress, read scan results at a glance, and start or cancel scans without opening the dashboard.

Tool name	Type	What it does	Prompt
`scan_list`	Read	Lists scans on a target.	“What is the status of the latest scan on app.example.com?”
`scan_get`	Read	Gets one scan with its progress and type.	“Show the details of my most recent scan on api.example.com.”
`scan_get_stats`	Read	Counts the vulnerabilities in a scan by severity and status.	“How many critical and high vulnerabilities did the last scan find?”
`scan_validate_start`	Read	Checks whether a scan can start on a target and lists any choice still needed. Nothing is started.	“Can I start an automated scan on app.example.com?”
`scan_start`	Write	Starts a scan on one target after the user has chosen the scan type.	“Start a Lightning scan on app.example.com.”
`scan_cancel`	Delete	Cancels a running or pending scan. The scan record is kept.	“Cancel the scan that is running on staging.example.com.”

Note

The scan types offered depend on the target type and the plan. Before starting an automated scan, the assistant asks which scan type to run (Full, Emerging or Lightning) and, for a Full scan, which coverage to use.

Vulnerabilities

Review open vulnerabilities, get everything needed to fix one, and move it through its workflow once the fix is in.

Tool name	Type	What it does	Prompt
`vulnerability_list`	Read	Lists vulnerabilities with filters.	“List all open critical vulnerabilities on app.example.com.”
`vulnerability_get`	Read	Gets one vulnerability.	“Show the details of the SQL injection vulnerability on api.example.com.”
`vulnerability_get_findings_summary`	Read	Summarizes the findings of one vulnerability without loading every finding.	“How many URLs are affected by this cross-site scripting vulnerability?”
`vulnerability_remediation_brief`	Read	Builds a remediation brief for one vulnerability.	“Help me fix this vulnerability in my codebase.”
`vulnerability_get_transitions`	Read	Lists the workflow actions available for a vulnerability in its current status.	“What can I do with this vulnerability now?”
`vulnerability_apply_transition`	Write	Applies one workflow action to a vulnerability.	“I have fixed this issue. Submit it for review.”

Findings

Read the exact evidence behind a vulnerability, such as the affected URL, parameter and HTTP request, to reproduce and fix it.

Tool name	Type	What it does	Prompt
`finding_list`	Read	Lists the findings of a vulnerability.	“List the affected URLs and parameters for this vulnerability.”
`finding_get`	Read	Gets one finding with full evidence.	“Show the request and response for this finding.”

Comments

Read and add to the discussion on a vulnerability, for example to tell the security team what was changed.

Tool name	Type	What it does	Prompt
`comment_list`	Read	Lists comments on a vulnerability.	“Show the comments on this vulnerability.”
`comment_get`	Read	Gets one comment.	“Open the latest comment from the security team.”
`comment_add`	Write	Adds a comment to a vulnerability.	“Add a comment that the fix was deployed to production today.”
`comment_update`	Write	Edits a comment.	“Update my last comment to mention the fixed endpoint /api/login.”
`comment_delete`	Delete	Deletes a comment.	“Delete my last comment on this vulnerability.”

Rescans

Confirm a fix by requesting a rescan of one vulnerability, then check whether it passed.

Tool name	Type	What it does	Prompt
`rescan_get_eligibility`	Read	Checks whether one vulnerability can be rescanned. Nothing is requested.	“Can I request a rescan for this vulnerability?”
`rescan_request`	Write	Requests a rescan of one vulnerability on a scan.	“Request a rescan for this vulnerability.”
`rescan_list`	Read	Lists rescans, for example on one scan.	“Show the rescan history for my last pentest.”
`rescan_get`	Read	Gets one rescan.	“Did the rescan I requested yesterday pass?”
`rescan_vulnerability_list`	Read	Lists the result of each vulnerability in a rescan.	“Which vulnerabilities are still open after the rescan?”
`rescan_vulnerability_get`	Read	Gets the rescan result for one vulnerability.	“Was the SQL injection closed in the last rescan?”

Schedules

Set up and manage recurring scans in plain language, such as "every Monday at 9 AM", without writing a cron expression.

Tool name	Type	What it does	Prompt
`schedule_list`	Read	Lists recurring scan schedules.	“List all scan schedules on my targets.”
`schedule_get`	Read	Gets one schedule.	“When is the next scheduled scan on app.example.com?”
`schedule_validate_frequency`	Read	Checks a schedule frequency and turns it into exact run times. Nothing is saved.	“Check if every Monday at 9 AM IST works as a schedule.”
`schedule_create`	Write	Creates a recurring scan schedule on a target.	“Schedule a weekly Full scan on app.example.com every Monday at 9 AM IST.”
`schedule_update`	Write	Changes a schedule, or pauses or resumes it.	“Pause the weekly scan on staging.example.com.”
`schedule_delete`	Delete	Deletes a schedule in two steps: a preview first, then the delete after the user confirms.	“Delete the monthly scan schedule on staging.example.com.”

Reports

Generate reports for stakeholders from the chat, then open them in the Astra dashboard.

Tool name	Type	What it does	Prompt
`report_validate_generate`	Read	Lists the report types available on the account and checks the report settings before generating. Nothing is generated.	“What reports can I generate for my last scan?”
`report_generate`	Write	Generates a report.	“Generate a Management Report for my latest pentest and email it to me.”
`report_list`	Read	Lists generated reports.	“List the reports generated this month.”
`report_get`	Read	Gets one report.	“Is my Full Report ready?”

Note

Report files are not downloaded through Astra MCP. The assistant shares a link that opens the report in the Reports tab in Astra, where it can be downloaded.
With Send as Email, the report is emailed to the signed-in user's account email and also appears in the Reports tab.
The report types offered depend on the plan.

Create a login recording so Astra can scan the pages behind a sign-in. For the full steps, see Create a login recording or check a HAR file with Astra MCP.

Tool name	Type	What it does	Prompt
`login_recording_intake`	Read	Starts a login recording and collects what is needed first.	“Create a login recording for https://app.example.com/login.”
`login_recording_get_guide`	Read	Loads the step-by-step guide for the chosen sign-in type.	“Show the guide for recording a magic link login.”

HAR file check

Check a HAR file before using it for a scan, and fix common problems. For the full steps, see Create a login recording or check a HAR file with Astra MCP.

Tool name	Type	What it does	Prompt
`har_validator_intake`	Read	Starts a HAR file check.	“Check whether my recording.har file is ready for a scan.”
`har_validator_get_guide`	Read	Loads the HAR check guide or the check script.	“Show the HAR file rules Astra checks.”

Activity log

Answer "who did what, and when" questions, such as who marked a vulnerability as a false positive or who started a scan.

Tool name	Type	What it does	Prompt
`activity_log`	Read	Searches the activity log.	“Who marked this vulnerability as a false positive?”

Workspaces and subscriptions

See the workspaces and companies the user belongs to, and the subscriptions, targets and invoices in a workspace.

Tool name	Type	What it does	Prompt
`workspace_list`	Read	Lists workspaces.	“List the workspaces I have access to.”
`company_list`	Read	Lists companies.	“Show the company for example.com.”
`subscription_list`	Read	Lists the subscriptions in a workspace.	“Show the subscriptions and invoices in my workspace.”

CI/CD integrations

Check which CI/CD integrations, such as GitHub or GitLab, are connected to a workspace and to which targets. Integrations are set up in the dashboard.

Tool name	Type	What it does	Prompt
`cicd_integration_list`	Read	Lists the CI/CD integrations in a workspace.	“Which CI/CD integrations are connected in my workspace?”
`cicd_integration_get`	Read	Gets one CI/CD integration.	“Show the details of our GitHub integration.”

Prompts

Prompts are ready-made instructions that start a common task. AI tools that support MCP prompts list them in the chat, often as slash commands.

Prompt	What it does	Inputs
`astra_fix_vulnerability`	Loads the remediation brief for one vulnerability and guides the assistant to read the comments and evidence, fix the code, add a comment and submit the vulnerability for review.	Vulnerability ID
`astra_request_rescan`	Prepares a rescan request for one vulnerability on a scan, with the scan details, rescan eligibility and earlier rescans.	Scan ID and vulnerability ID
`astra_change_vulnerability_status`	Shows the current status of one vulnerability and the actions available, then applies the chosen action.	Vulnerability ID; optional action

For anything not covered here, contact help@getastra.com.

Astra MCP tools reference

Key terms

Targets

Scans

Vulnerabilities

Findings

Comments

Rescans

Schedules

Reports

Login recording

HAR file check

Activity log

Workspaces and subscriptions

CI/CD integrations

Prompts

Related articles