NetSPI Platform
Model Context Protocol
( MCP ) Integration

NetSPI’s agentic MCP integration enhances overall program health, bridges the gap between security and IT operations, and enables executives to drive proactive risk mitigation.

NetSPI » The NetSPI Platform » Model Context Protocol

NetSPI Platform + Model Context Protocol ( MCP )

Empower your AI workflows with NetSPI validated vulnerability data

As you continue to integrate AI-driven automation to keep pace with attackers, our MCP integration helps your agentic workflows keep up.

  • With NetSPI validated vulnerability data & engagement context, agentic systems can utilize our MCP to automate risk-based decisions and workflows.
  • Integrate data into broader security & IT workflows, allowing agents to automatically create tickets, enrich alerts, or update systems of record.
  • Extend the reach of your security team by enabling your agents to handle repetitive analysis and coordination tasks across large volumes of NetSPI findings.

Leverage Validated Vulnerability Data with NetSPI Agentic MCP Integration

Connect an MCP-compatible AI assistant, such as Cursor, Claude, GitHub Copilot, or VS Code, to the NetSPI Platform MCP Server. NetSPI Platform’s Model Context Protocol ( MCP ) Server lets your AI assistant securely query NetSPI platform data, retrieve finding and engagement details, export data, and generate reports using your existing NetSPI platform permissions.

  • Agentic MCP integrations that empower your organization’s agents to seamlessly access and act on NetSPI engagement and vulnerability data.
  • NetSPI provides vetted, organized, trusted vulnerabilities that are orchestrated between PTaaS and their ticketing system creating value, and saving cost and time.

“”

MCP Tool ActionsPurpose
list_query_modelsLists available platform data models
get_model_schemaShows fields and types for a model
query_dataQueries with filters, columns, sorting, pagination
get_finding_detailRetrieves full detail for a finding
get_engagement_detailGets full detail for an engagement or project
generate_reportGenerates a PDF report for a report ID
export_data_tableExports query results as CSV or JSON

Example Prompts

  • List all critical open findings for engagement 42.
  • Show me engagements that started in the last 30 days.
  • Get the full detail for finding ID 1234.
  • Export all critical findings for engagement 10 as JSON.
  • Generate the PDF report for report ID 99.

AI can only access data that a platform account is authorized to see.

Anthropic ( Claude )

Claude Code 

claude mcp add --transport sse netspi-platform http://localhost:4490/mcp/sse \
  --header "x-token: <your-platform-api-token>" \
  --header "x-app-name: netspi-platform"

Claude Desktop

Connect to the local MCP Server using mcp-remote in your claude_desktop_config.json

{
  "mcpServers": {
    "netspi-platform": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote@latest",
        "http://localhost:4490/mcp/sse",
        "--header",
        "x-token: <your-platform-api-token>",
        "--header",
        "x-app-name: netspi-platform",
        "--transport",
        "sse-only"
     ]
    }
  }
}

Claude Desktop requires Node.js 24 or later for this setup.

GitHub Copilot or VS Code

Add this to your VS Code settings.json:

{
  "github.copilot.chat.mcpServers": {
    "netspi-platform": {
      "url": "http://localhost:4490/mcp/sse",
      "headers": {
        "x-token": "<your-platform-api-token>",
        "x-app-name": "netspi-platform" 
    }
   }
  }
}

Cursor

Add this to .cursor/mcp.json for a project-level setup, or ~/.cursor/mcp.json for a global setup:

{
  "mcpServers": {
    "netspi-platform": {
      "url": "http://localhost:4490/mcp/sse",
      "headers": {
        "x-token": "<your-platform-api-token>",
        "x-app-name": "netspi-platform" 
    }
   }
  }
}

The New NetSPI Platform Experience

  • Get answers to critical security questions faster, aligned to role and priorities
  • Manage integrations, scans, and agents in one centralized workflow
  • Accelerate detection, prioritization, and remediation across the attack surface
  • Clearly demonstrate security outcomes to technical and executive stakeholders

“”

You Deserve The NetSPI Advantage

Human-Led

  • 350+ pentesters
  • Employed, not outsourced
  • Wide domain expertise

AI-Accelerated

  • Consistent quality
  • Deep visibility
  • Transparent results

Modern Pentesting

  • Use case driven
  • Friction-free
  • Built for today’s threats