Introduction

Astra MCP connects your AI assistant to your Astra account so you can view, query, and act on pentest data through natural language , without switching between tools or exporting screenshots.

Once connected, your AI assistant inherits your Astra permissions and can access targets, audits, vulnerabilities, findings, and comments. You can ask questions, get contextual insights, update issues, or request rescans all from within your preferred AI tool.

Prerequisites

Before you begin, ensure:

• You have an active Astra account with access to relevant workspaces

• You are using an MCP-compatible tool such as:

  • ChatGPT Web or ChatGPT App

  • Claude Desktop or Claude Code

  • Cursor

  • Visual Studio Code

  • Other tools : Any assistant that supports remote HTTP MCP servers and browser-based OAuth.

• If 2FA is enabled, your device is available for OTP verification

MCP Server URL

Use the following URL during setup:

https://mcp.getastra.com/mcp

Instructions

Setup in ChatGPT Web

1. In ChatGPT, open Plugins from the sidebar, click Add (+), and select Add Custom MCP Server.

2. Enter the server details:

   • Name: Astra MCP

   • Connection: Server URL

   • Server URL: https://mcp.getastra.com/mcp

   • Authentication: OAuth

3. Accept the risk acknowledgment and click Create as a plugin.

4. Authorize Astra MCP. On the Connect Astra MCP screen, click Continue to Astra MCP. Complete sign-in and authorization in your browser. Once authorization succeeds, Astra MCP is connected to ChatGPT.

Setup in ChatGPT App

1. Add a custom MCP server. Open ChatGPT Settings, search for MCP, and navigate to MCP under Plugins + MCP. Select Add Custom MCP Server.

2. Enter the server details:

   • Name: Astra MCP

   • Type: Streamable HTTP

   • Server URL: https://mcp.getastra.com/mcp

3. Save the configuration to add Astra MCP.

4. Authenticate Astra MCP. Return to the MCP settings and locate Astra MCP. Start the authentication flow for the server. ChatGPT will redirect you to Astra's authorization page in your browser.

5. Complete authorization. Follow the browser prompts to sign in and grant access. Once complete, return to ChatGPT and verify that Astra MCP is connected.

Set Up in Claude Desktop

1. Open Claude Desktop

2. Go to Customize → Connectors

3. Click + Add Custom Connector

4. Enter:

   • Name: Astra MCP

   • Server URL: https://mcp.getastra.com/mcp

5. Click Add

6. Select Astra MCP and click Connect

7. Complete sign-in in the browser . You’ll be redirected back once connected.

Set Up in Cursor

1. Open Cursor Settings → Tools and MCP

2. Add the following configuration:

{
  "mcpServers": {
    "astra": {
      "url": "https://mcp.getastra.com/mcp"
    }
  }
}

3. Restart Cursor if prompted

4. Start using MCP-enabled assistant

5. Complete browser authentication on first use

Set Up in VS Code

1. Run MCP: Add Server from the Command Palette

   Press Cmd+Shift+P, or Ctrl+Shift+P on Windows and Linux.

2. Choose HTTP and paste the server URL

   Name the server astra, then choose Workspace or Global. VS Code asks you to trust the server before it starts.

   Server URL

   https://mcp.getastra.com/mcp

3. Or add it to your config directly

   VS Code uses servers as the top-level key, not mcpServers. Workspace config lives in .vscode/mcp.json.

   .vscode/mcp.json

   {
     "servers": {
       "astra": {
         "type": "http",
         "url": "https://mcp.getastra.com/mcp"
       }
     }
   }

Set Up in Claude Code

1. Run in terminal:

claude mcp add --transport http astra https://mcp.getastra.com/mcp

2. Restart Claude Code if required

3. Run:

/mcp

4. Complete browser authentication

To verify:

claude mcp list

Expected Outcome

Once setup is complete, your AI assistant will be connected to your Astra account. You'll be able to:

• Query vulnerabilities, findings, audits, and targets using natural language

• Get instant contextual insights without leaving your AI tool

• Update issues, add comments, or progress workflows based on your account permissions

• Start/Schedule scan, Triage and fix vulnerabilities, generate reports

Best Practices

• Use the correct account. If data looks missing or incomplete, confirm you're logged into the right Astra organization.

• Use servers as the top-level key, not mcpServers

• Set type to http, or the server will not start

• Accept the trust prompt the first time the server starts

• Run MCP: List Servers, then Show Output to read the logs

• Keep authentication active. If the connection drops, re-authenticate via the browser sign-in flow for your tool.

• Check firewall and VPN settings if the MCP server URL fails to connect — ensure mcp.getastra.com is accessible from your network.

• Limit MCP access to trusted tools. Since the assistant inherits your Astra permissions, only connect Astra MCP on devices and tools you control.

• Reach out for help early. If setup fails, contact your Astra administrator or reach out to Astra Support at help@getastra.com before retrying repeatedly.