Cursor setup

  1. Open Cursor.
  2. Go to Cursor → Settings → MCP → Add new global MCP server.
  3. Paste this JSON (replace the key):
    {
      "mcpServers": {
        "security-scanner": {
          "command": "npx",
          "args": ["-y", "@security-scanner/mcp-server"],
          "env": { "SCANNER_API_KEY": "ss_live_…" }
        }
      }
    }
  4. Restart Cursor.
  5. Open a Composer chat. Type: scan example.com.
  6. Cursor will invoke the MCP tool and show the scan card in the chat.

Project-scoped config

To enable the MCP server only for a specific project, create .cursor/mcp.json in the project root with the same JSON. Cursor will pick it up automatically.

Verifying the connection

From the Composer chat, run: scan https://example.com. If you get a scan_id back, you're connected. If you see an auth error, double-check the API key.