Get Started - Hacktron Docs

Claude Code (CLI)
Claude Desktop
Cursor
Codex
Antigravity

Run in terminal:

claude mcp add --transport http hacktron https://mcp.hacktron.ai/mcp

Then authenticate the connection:

Start Claude Code in your project.
Type /mcp, select hacktron, and choose Authenticate.
Complete the Hacktron browser sign-in.

Prefer using an API key?

Create an organization API key — see Authentication. Grant read & write access to let your assistant triage findings.Run in terminal:

claude mcp add --transport http hacktron https://mcp.hacktron.ai/mcp --header "Authorization: Bearer hacktron_your_key_here"

An API key is a long-lived secret. Store it in your client’s secret settings, never commit it to source control, and grant the narrowest scope your workflow needs.

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "hacktron": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://mcp.hacktron.ai/mcp"]
    }
  }
}

Restart Claude Desktop to apply changes.When Claude Desktop connects to Hacktron for the first time, complete the Hacktron browser sign-in. If the prompt does not appear, open Claude Desktop’s MCP server settings and reconnect hacktron.

Prefer using an API key?

Create an organization API key — see Authentication. Grant read & write access to let your assistant triage findings.

{
  "mcpServers": {
    "hacktron": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://mcp.hacktron.ai/mcp", "--header", "Authorization: Bearer hacktron_your_key_here"]
    }
  }
}

An API key is a long-lived secret. Store it in your client’s secret settings, never commit it to source control, and grant the narrowest scope your workflow needs.

Add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "hacktron": {
      "url": "https://mcp.hacktron.ai/mcp"
    }
  }
}

Reload Cursor after saving (Cmd+Shift+P → Reload Window).When Cursor prompts you to authenticate hacktron, complete the Hacktron browser sign-in. You can also open Cursor’s MCP settings, select hacktron, and start authentication from there.

Prefer using an API key?

Create an organization API key — see Authentication. Grant read & write access to let your assistant triage findings.

{
  "mcpServers": {
    "hacktron": {
      "url": "https://mcp.hacktron.ai/mcp",
      "headers": {
        "Authorization": "Bearer hacktron_your_key_here"
      }
    }
  }
}

An API key is a long-lived secret. Store it in your client’s secret settings, never commit it to source control, and grant the narrowest scope your workflow needs.

Run in terminal:

codex mcp add hacktron --url https://mcp.hacktron.ai/mcp

Then authenticate the connection:

codex mcp login hacktron

Complete the Hacktron browser sign-in. In an interactive Codex session, type /mcp to check the server’s connection and authentication status.

Prefer using an API key?

Create an organization API key — see Authentication. Grant read & write access to let your assistant triage findings.1. Add your API key to your shell profile (~/.zshrc or ~/.bashrc):

export HACKTRON_API_KEY=hacktron_your_key_here

2. Register the server:

codex mcp add hacktron --url https://mcp.hacktron.ai/mcp --bearer-token-env-var HACKTRON_API_KEY

An API key is a long-lived secret. Store it in your client’s secret settings, never commit it to source control, and grant the narrowest scope your workflow needs.

Add to ~/.gemini/config/mcp_config.json:

{
  "mcpServers": {
    "hacktron": {
      "serverUrl": "https://mcp.hacktron.ai/mcp"
    }
  }
}

Click Refresh in the MCP Servers panel to apply changes.Select hacktron in the MCP Servers panel and complete the Hacktron browser sign-in when prompted.

Tools

Name	Description
`list_scans`	List scans with severity breakdown
`get_scan`	Get details about a scan
`export_findings`	Export a scan’s findings as JSON, CSV, or SARIF
`list_findings`	List findings across the organisation
`get_finding`	Get details about a finding
`update_finding`	Update a finding’s state or severity
`add_finding_comment`	Post a comment on a finding

Authentication & API keys

Create and scope the API key used for API-key auth.

API reference

The same scans and findings, over the REST API.

​Tools

​Related

Authentication & API keys

API reference

Tools

Related