Docs

Cloud MCP

On the Builder plan and up, SafeWeave runs a hosted MCP server your agent connects to by URL — no local install. It authenticates over OAuth 2.1 and works with Claude, Cursor, ChatGPT, and any MCP-compatible client.

Connect

Add this remote MCP server URL in your client:

Cloud MCP URL
https://mcp.safeweave.dev/mcp

Your client opens a browser to sign in with your SafeWeave account and authorize access. Tokens are short-lived and scoped to your repositories.

What your agent can do

  • list_resources — your connected repositories and their scores.
  • get_cloud_findings — open findings across repos (severity, file:line, CWE).
  • get_fix_context — the fix guidance for a finding (you apply it in your checkout).
  • trigger_cloud_scan / get_scan_status — start a scan and poll it.
  • get_security_score — score, grade, and severity totals for a repo.

The Cloud MCP returns finding context only — never your source code.

Prefer local?

Free and Local Pro scan entirely on your machine with the local MCP server — see editor setup or the CLI.