Endpoint
https://mcp.attacksurfacescan.com/mcpStreamable HTTP with OAuth 2.1 and dynamic client registration: no API keys to copy. Your client opens our consent page, you sign in and approve, and the connection acts as you. Connections are listed and revocable in the app under Team → Connected apps.
MCP or REST?
| MCP server | REST API | |
|---|---|---|
| Best for | People working through an AI assistant | Scripts, SIEMs, GRC and data pipelines |
| Auth | OAuth, per person | API key, per organisation |
| Access | Read and act (scan, triage, reports) | Read-only |
| Plans | Every plan | Growth and above |