Cursor setup
- Open Cursor.
- Go to Cursor → Settings → MCP → Add new global MCP server.
- Paste this JSON (replace the key):
{ "mcpServers": { "security-scanner": { "command": "npx", "args": ["-y", "@security-scanner/mcp-server"], "env": { "SCANNER_API_KEY": "ss_live_…" } } } } - Restart Cursor.
- Open a Composer chat. Type:
scan example.com. - Cursor will invoke the MCP tool and show the scan card in the chat.
Project-scoped config
To enable the MCP server only for a specific project, create .cursor/mcp.json in the project root with the same JSON. Cursor will pick it up automatically.
Verifying the connection
From the Composer chat, run: scan https://example.com. If you get a scan_id back, you're connected. If you see an auth error, double-check the API key.