VulKill GitHub ↗

VulKill / MCP SETUP GUIDE

From your AI to VulKill.

MCP setup guide for ChatGPT, Claude and Gemini.

MCP lets your AI application communicate with VulKill tools. After connecting your account, you can check your credit balance, request authorized scans and read your reports.

01 / ChatGPT ↘02 / Claude ↘03 / Gemini ↘
01

ChatGPT

Add the MCP address in your application, then sign in to VulKill and allow the connection.

  1. Add the MCP configuration

    Plugins → + → Add custom MCP server

    MCP · Streamable HTTP
    https://app.vulkill.com/api/mcp?client=chatgpt

  2. Authorize the connection

    VulKill · OAuth → Create as a plugin → Install

    Use the same account on the permission screen.

  3. Your first message

    @VulKill

    View credits
    Show my VulKill credit balance.
OpenAI ↗
02

Claude

Add the MCP address in your application, then sign in to VulKill and allow the connection.

  1. Add the MCP configuration

    Customize → Connectors → + Add → Add custom connector

    MCP · Streamable HTTP
    https://app.vulkill.com/api/mcp?client=claude

  2. Authorize the connection

    Sign in → Register automatically → Add

    Use the same account on the permission screen.

  3. Your first message

    + → Connectors → VulKill

    View credits
    Show my VulKill credit balance.
Anthropic ↗
03

Gemini

Gemini CLI / Antigravity

Add the MCP address in your application, then sign in to VulKill and allow the connection.

  1. Gemini CLI

    Terminal
    gemini mcp add --transport http --scope user vulkill https://app.vulkill.com/api/mcp

  2. Save and authorize

    Gemini CLI
    /mcp auth vulkill

    Use the same account on the permission screen.

  3. Your first message

    View credits
    Show my VulKill credit balance.
Gemini CLI ↗
Antigravity

MCP Servers → Manage MCP Servers → View raw config

Add vulkill to mcpServers. Keep your other connections.

MCP configuration
{
  "mcpServers": {
    "vulkill": {
      "serverUrl": "https://app.vulkill.com/api/mcp?client=antigravity",
      "timeoutSeconds": 180
    }
  }
}

Refresh with /mcp in the CLI. In the app, go to Settings → Customizations → Authenticate. Check your account and permissions on the VulKill screen, then authorize.

Browser → authorization code → Settings → Submit

Google's setup documentation ↗
Install the plugin package · Antigravity

Extract the ZIP. Run the command from the directory containing vulkill-security, then connect your own VulKill account.

Download the Antigravity package ↓
Antigravity CLI
agy plugin install ./vulkill-security

Choose direct MCP configuration or the plugin; do not install both.

MCP + API

Alternative: connect with an API key

Do not put the key in a chat message or URL. Store it as VULKILL_API_KEY in your tool’s secret settings.

HTTP
Authorization: Bearer <VULKILL_API_KEY>
MCP & API KEY ↗

VulKill

Reports

Website scans require ownership verification. Code scans send the file contents with your permission; a folder path is not enough.

View findings and recommended fixes from completed scans in your account.

Reports ↗

Scan requests are submitted through the MCP or API connection linked to your account. Only scan targets you own or have permission to test.