Introduction

Astra MCP connects your AI assistant to your Astra account so you can view, query, and act on pentest data through natural language , without switching between tools or exporting screenshots.

Once connected, your AI assistant inherits your Astra permissions and can access targets, audits, vulnerabilities, findings, and comments. You can ask questions, get contextual insights, update issues, or request rescans all from within your preferred AI tool.

Prerequisites

Before you begin, ensure:

• You have an active Astra account with access to relevant workspaces

• You are using an MCP-compatible tool such as:

  • ChatGPT (paid plan required)

  • Claude Desktop or Claude Code

  • Cursor

  • Visual Studio Code

  • Other tools : Any assistant that supports remote HTTP MCP servers and browser-based OAuth.

• If 2FA is enabled, your device is available for OTP verification

MCP Server URL

Use the following URL during setup:

https://mcp.getastra.com/mcp

Instructions

Set Up in ChatGPT (Paid Version Only)

1. Open Settings → Data Controls and turn off "Improve the model for everyone"

2. Go to Settings → Personalization -> Advanced and enable "Connector Search"

3. Navigate to Settings → Security and login and enable "Developer Mode"

4. Go to Plugin and click "New Plugin"

5. Enter:

   • Name: Astra MCP

   • Server URL: https://mcp.getastra.com/mcp

6. Select OAuth as authentication

7. Accept the risk acknowledgment

8. Complete sign-in via browser. Once authenticated, Astra MCP will be connected.

Set Up in Claude Desktop

1. Open Claude Desktop

2. Go to Customize → Connectors

3. Click + Add Custom Connector

4. Enter:

   • Name: Astra MCP

   • Server URL: https://mcp.getastra.com/mcp

5. Click Add

6. Select Astra MCP and click Connect

7. Complete sign-in in the browser . You’ll be redirected back once connected.

Set Up in Cursor

1. Open Cursor Settings → Tools and MCP

2. Add the following configuration:

{
  "mcpServers": {
    "astra": {
      "url": "https://mcp.getastra.com/mcp"
    }
  }
}

3. Restart Cursor if prompted

4. Start using MCP-enabled assistant

5. Complete browser authentication on first use

Set Up in VS Code

1. Open Command Palette

   • Mac: Cmd + Shift + P

   • Windows/Linux: Ctrl + Shift + P

2. Search: MCP: Open Configuration

3. Add:

{
  "servers": {
    "astra-mcp": {
      "url": "https://mcp.getastra.com/mcp",
      "type": "http"
    }
  },
  "inputs": []
}

Set Up in Claude Code

1. Run in terminal:

claude mcp add --transport http astra https://mcp.getastra.com/mcp

2. Restart Claude Code if required

3. Run:

/mcp

4. Complete browser authentication

To verify:

claude mcp list

Expected Outcome

Once setup is complete, your AI assistant will be connected to your Astra account. You'll be able to:

• Query vulnerabilities, findings, audits, and targets using natural language

• Get instant contextual insights without leaving your AI tool

• Update issues, add comments, or progress workflows based on your account permissions

• Start/Schedule scan, Triage and fix vulnerabilities, generate reports

Best Practices

• Use the correct account. If data looks missing or incomplete, confirm you're logged into the right Astra organization.

• Use servers as the top-level key, not mcpServers

• Set type to http, or the server will not start

• Accept the trust prompt the first time the server starts

• Run MCP: List Servers, then Show Output to read the logs

• Keep authentication active. If the connection drops, re-authenticate via the browser sign-in flow for your tool.

• Check firewall and VPN settings if the MCP server URL fails to connect — ensure mcp.getastra.com is accessible from your network.

• Limit MCP access to trusted tools. Since the assistant inherits your Astra permissions, only connect Astra MCP on devices and tools you control.

• Reach out for help early. If setup fails, contact your Astra administrator or reach out to Astra Support at help@getastra.com before retrying repeatedly.