GRIDINSOFT FOR AI AGENTS
Native MCP · stdio

Threat intelligence
through MCP.

Access domain checks and URL scans from Claude, Codex, Cursor and other MCP clients for security research and investigation.

100 free credits every month. Start with your Inspector account.

DOMAIN ANALYSIS VIA MCP

Illustrative response

5tools

Domain checks, URL scans & your balance

2prompts

Domain investigation templates

1API key

Uses your Inspector API key

OPEN SOURCE ADAPTERView the MCP adapter on GitHub
01 / INVESTIGATION WORKFLOWS

Domain and URL analysis
in your research workflow.

Use MCP tools to retrieve domain assessments and scan URLs while investigating alerts, reported links or research datasets.

DOMAIN REPUTATION

Domain assessment
for an investigation.

Retrieve reputation, threat category and assessment context for a domain from an alert or research dataset.

YOU → YOUR AGENT

“Retrieve the assessment for example.com and identify missing data.”

Illustrative workflow · no check is running
THE AGENT’S NEXT STEP01 / 03
EXAMPLE TOOL CALL
inspect_domain3 credits
{ "domain": "example.com" }
WHAT COMES BACK

A verdict, with its context.

ReputationCategoryReport reference

The agent can explain the available assessment and call out missing data. Unknown does not mean safe.

GUIDED INVESTIGATION

Structure a
domain investigation.

Use a built-in prompt to frame a domain assessment and keep the distinction between evidence and uncertainty clear.

YOU → YOUR AGENT

“Build a trust report for example.com. Show me what is known and what is missing.”

Illustrative workflow · no check is running
THE AGENT’S NEXT STEP03 / 03
EXAMPLE PROMPT
verify-domain-trustFree prompt
{ "domain": "example.com" }
A STARTING POINT FOR ANALYSIS

Assessment, sources and limitations.

AssessmentSource contextLimitations

Prompts and reference resources are free. Domain checks and URL scans requested during the investigation use their usual credits.

Inspector supplies security context. Your agent explains it. You decide what happens next.

MCP CLIENT SETUP

Configure your
MCP client.

Select your client and add the configuration with your Inspector API key.

01Install Node.js 22+

Check node --version. Your agent needs access to npx. Get Node.js ↗

02Get your API key

Copy it from your Inspector profile. Start with 100 free credits per month.

03Connect & verify

Use the recipe below, then call get_balance. The connection check costs zero credits.

Terminal agent

Configure Gridinsoft in Claude Code.

Official guide ↗
  1. Set your key in this terminal

    Before registering the server, run export GRIDINSOFT_API_KEY="YOUR_GRIDINSOFT_API_KEY" with your own key. Keep it available whenever you launch Claude.

  2. Register the server

    Run the command below. User scope makes Inspector available across projects. The saved configuration reads the key from Claude’s environment.

  3. Start a fresh Claude session

    Open /mcp and confirm that gridinsoft is connected. Existing entry? Remove it with claude mcp remove gridinsoft before registering again.

CONFIGURATIONRun in your terminal · macOS / LinuxShell
Gridinsoft Inspector · 1.0.7
claude mcp add-json --scope user gridinsoft '{
  "command": "npx",
  "args": [
    "-y",
    "@gridinsoft/[email protected]"
  ],
  "env": {
    "GRIDINSOFT_API_KEY": "${GRIDINSOFT_API_KEY}"
  },
  "type": "stdio",
  "timeout": 120000
}'

The 120,000 ms tool timeout accommodates URL scans. On Windows, use the JSON below in a project’s .mcp.json, set $env:GRIDINSOFT_API_KEY="YOUR_GRIDINSOFT_API_KEY" in PowerShell, then start Claude there.

Windows configuration

Use this version so Windows launches npx through cmd /c. Keep the path and restart steps above.

Windows · JSON
{
  "mcpServers": {
    "gridinsoft": {
      "command": "cmd",
      "args": [
        "/c",
        "npx",
        "-y",
        "@gridinsoft/[email protected]"
      ],
      "env": {
        "GRIDINSOFT_API_KEY": "${GRIDINSOFT_API_KEY}"
      },
      "type": "stdio",
      "timeout": 120000
    }
  }
}
Check the connection. Free.

claude mcp get gridinsoft shows the server. In Claude, ask: “Use Gridinsoft Inspector’s get_balance tool and show my remaining credits.”

CLI · desktop · IDE

Configure Gridinsoft in Codex.

Official guide ↗
  1. Open your personal Codex configuration

    Create ~/.codex/config.toml if it does not exist. On Windows, use %USERPROFILE%\.codex\config.toml.

  2. Add the server

    Merge the block below into the file and replace the API key placeholder locally. Update an existing mcp_servers.gridinsoft block instead of duplicating it.

  3. Reload the connection

    Start a new CLI session or restart the server in the app’s MCP settings. The CLI, desktop app and IDE use the configuration on their execution host.

CONFIGURATION~/.codex/config.tomlTOML
Gridinsoft Inspector · 1.0.7
[mcp_servers.gridinsoft]
command = "npx"
args = ["-y", "@gridinsoft/[email protected]"]
startup_timeout_sec = 60
tool_timeout_sec = 120

[mcp_servers.gridinsoft.env]
GRIDINSOFT_API_KEY = "YOUR_GRIDINSOFT_API_KEY"

The startup timeout allows for the first npm download. The separate 120-second tool timeout covers a slow URL scan.

Windows configuration

Use this version so Windows launches npx through cmd /c. Keep the path and restart steps above.

Windows · TOML
[mcp_servers.gridinsoft]
command = "cmd"
args = ["/c", "npx", "-y", "@gridinsoft/[email protected]"]
startup_timeout_sec = 60
tool_timeout_sec = 120

[mcp_servers.gridinsoft.env]
GRIDINSOFT_API_KEY = "YOUR_GRIDINSOFT_API_KEY"
Check the connection. Free.

codex mcp list should include gridinsoft. Then ask Codex to call get_balance.

Nous Research

Configure Gridinsoft in Hermes.

Official guide ↗
  1. Open your Hermes configuration

    Use ~/.hermes/config.yaml on macOS, Linux or WSL2; %LOCALAPPDATA%\hermes\config.yaml on native Windows. If you set HERMES_HOME, use that directory. Merge under the existing mcp_servers section.

  2. Add Inspector and your key

    Replace the placeholder in the private local config. Explicitly passing env matters: Hermes filters the environment inherited by MCP subprocesses.

  3. Reload MCP

    Start hermes chat or run /reload-mcp in the current session. The same configuration works on native Windows; Hermes resolves npx through its managed runtime.

CONFIGURATION~/.hermes/config.yamlYAML
Gridinsoft Inspector · 1.0.7
mcp_servers:
  gridinsoft:
    command: npx
    args: ["-y", "@gridinsoft/[email protected]"]
    env:
      GRIDINSOFT_API_KEY: "YOUR_GRIDINSOFT_API_KEY"
    timeout: 120
    connect_timeout: 60

Hermes timeouts are in seconds. If you keep secrets in the private .env file beside config.yaml, use GRIDINSOFT_API_KEY: "${GRIDINSOFT_API_KEY}" in the config instead. Native Windows guide ↗

Check the connection. Free.

hermes mcp test gridinsoft checks connectivity. Ask Hermes to call mcp_gridinsoft_get_balance.

IDE agent

Configure Gridinsoft in Cursor.

Official guide ↗
  1. Open your user-level MCP file

    Use ~/.cursor/mcp.json on macOS or Linux; %USERPROFILE%\.cursor\mcp.json on Windows.

  2. Merge the server entry

    Add gridinsoft under mcpServers and replace the API key placeholder in this personal file.

  3. Enable the tools

    Restart Cursor, enable Inspector in its MCP settings and check Available Tools. Start an Agent chat so it can use the tools.

CONFIGURATION~/.cursor/mcp.jsonJSON
Gridinsoft Inspector · 1.0.7
{
  "mcpServers": {
    "gridinsoft": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@gridinsoft/[email protected]"
      ],
      "env": {
        "GRIDINSOFT_API_KEY": "YOUR_GRIDINSOFT_API_KEY"
      }
    }
  }
}

Cursor does not document a configurable MCP tool timeout. Domain checks and balance are a good first test; a long URL scan may hit the host’s limit.

Windows configuration

Use this version so Windows launches npx through cmd /c. Keep the path and restart steps above.

Windows · JSON
{
  "mcpServers": {
    "gridinsoft": {
      "type": "stdio",
      "command": "cmd",
      "args": [
        "/c",
        "npx",
        "-y",
        "@gridinsoft/[email protected]"
      ],
      "env": {
        "GRIDINSOFT_API_KEY": "YOUR_GRIDINSOFT_API_KEY"
      }
    }
  }
}
Check the connection. Free.

Ask the Agent to call get_balance. If connection fails, inspect Output → MCP Logs.

Chat application

Configure Gridinsoft in Claude Desktop.

Official guide ↗
  1. Open the local server config

    In Claude Desktop, go to Settings → Developer → Edit Config. This is the chat app’s local MCP configuration.

  2. Add Inspector

    Merge the entry into claude_desktop_config.json and replace the API key placeholder locally. On macOS the file is in ~/Library/Application Support/Claude/; on Windows, %APPDATA%\Claude\.

  3. Quit and reopen Claude

    Fully quit the application, reopen it and check the local connector status. Start a new chat with Inspector enabled.

CONFIGURATIONSettings → Developer → Edit ConfigJSON
Gridinsoft Inspector · 1.0.7
{
  "mcpServers": {
    "gridinsoft": {
      "command": "npx",
      "args": [
        "-y",
        "@gridinsoft/[email protected]"
      ],
      "env": {
        "GRIDINSOFT_API_KEY": "YOUR_GRIDINSOFT_API_KEY"
      }
    }
  }
}

Claude Desktop does not document an adjustable host tool timeout. For long URL scans, use a client with the 120-second setting shown here. Linux desktop users can choose Claude Code.

Windows configuration

Use this version so Windows launches npx through cmd /c. Keep the path and restart steps above.

Windows · JSON
{
  "mcpServers": {
    "gridinsoft": {
      "command": "cmd",
      "args": [
        "/c",
        "npx",
        "-y",
        "@gridinsoft/[email protected]"
      ],
      "env": {
        "GRIDINSOFT_API_KEY": "YOUR_GRIDINSOFT_API_KEY"
      }
    }
  }
}
Check the connection. Free.

Ask Claude to call get_balance. Connection errors are shown in Developer settings and MCP logs.

Terminal agent

Configure Gridinsoft in Gemini CLI.

Official guide ↗
  1. Open your personal settings

    Use ~/.gemini/settings.json (Windows: %USERPROFILE%\.gemini\settings.json). Keep any existing settings and servers.

  2. Add the server

    Merge the entry under mcpServers, then replace the API key placeholder locally. Leave normal tool approval settings enabled.

  3. Reload discovery

    In Gemini, run /mcp reload followed by /mcp list. Or restart Gemini after saving the file.

CONFIGURATION~/.gemini/settings.jsonJSON
Gridinsoft Inspector · 1.0.7
{
  "mcpServers": {
    "gridinsoft": {
      "command": "npx",
      "args": [
        "-y",
        "@gridinsoft/[email protected]"
      ],
      "env": {
        "GRIDINSOFT_API_KEY": "YOUR_GRIDINSOFT_API_KEY"
      },
      "timeout": 120000
    }
  }
}

The timeout is in milliseconds. The explicit env entry supplies the key even when the client filters sensitive environment variables.

Windows configuration

Use this version so Windows launches npx through cmd /c. Keep the path and restart steps above.

Windows · JSON
{
  "mcpServers": {
    "gridinsoft": {
      "command": "cmd",
      "args": [
        "/c",
        "npx",
        "-y",
        "@gridinsoft/[email protected]"
      ],
      "env": {
        "GRIDINSOFT_API_KEY": "YOUR_GRIDINSOFT_API_KEY"
      },
      "timeout": 120000
    }
  }
}
Check the connection. Free.

gemini mcp list should show Inspector. Ask Gemini to call get_balance to verify authentication.

CLI · VS Code

Configure Gridinsoft in Copilot.

Official guide ↗
  1. Use the portable Copilot config

    Open ~/.copilot/mcp-config.json (Windows: %USERPROFILE%\.copilot\mcp-config.json). In current VS Code, choose MCP: Add Server → Command (stdio) → Global → Copilot Global.

  2. Merge the entry

    Add Inspector under mcpServers and replace the key locally. This format is shared with Copilot CLI. Keep normal tool approvals enabled.

  3. Restart the connection

    Start a new Copilot CLI session, or in VS Code use MCP: List Servers → gridinsoft → Restart Server. Remote sessions need Node and the key on their execution host.

CONFIGURATION~/.copilot/mcp-config.jsonJSON
Gridinsoft Inspector · 1.0.7
{
  "mcpServers": {
    "gridinsoft": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@gridinsoft/[email protected]"
      ],
      "env": {
        "GRIDINSOFT_API_KEY": "YOUR_GRIDINSOFT_API_KEY"
      },
      "tools": [
        "*"
      ],
      "timeout": 120000
    }
  }
}

This is the current Copilot format. Older VS Code Local sessions use .vscode/mcp.json with a servers wrapper instead; follow the VS Code format reference for that mode.

Windows configuration

Use this version so Windows launches npx through cmd /c. Keep the path and restart steps above.

Windows · JSON
{
  "mcpServers": {
    "gridinsoft": {
      "type": "stdio",
      "command": "cmd",
      "args": [
        "/c",
        "npx",
        "-y",
        "@gridinsoft/[email protected]"
      ],
      "env": {
        "GRIDINSOFT_API_KEY": "YOUR_GRIDINSOFT_API_KEY"
      },
      "tools": [
        "*"
      ],
      "timeout": 120000
    }
  }
}
Check the connection. Free.

copilot mcp list checks registration. Ask Copilot to call get_balance to verify the key.

Merge entries into your existing configuration. Replace YOUR_GRIDINSOFT_API_KEY only on your machine; keep keys out of shared repositories. The client starts the adapter for you. These recipes use the published 1.0.7 package and were checked against official client documentation.

03 / A SMALL, FOCUSED TOOLKIT

Five MCP tools
for security research.

One Inspector API key connects the set. Your agent selects a tool and returns its structured result to the conversation.

3 credits / call

inspect_domain

A domain’s available reputation, verdict, category, and report reference. Use the result for domain triage and investigation.

INPUT{ "domain": "example.com" }
TWO NAMES. THE SAME DOMAIN CHECK.
check_domain_safety3 credits
get_domain_reputation3 credits

These aliases use the same analysis and response as inspect_domain.

10 credits / call

scan_url

Analyze an HTTP or HTTPS page. Read its metadata, available security signals, and redirect information.

INPUT{ "url": "https://example.com" }

A scan can take up to 90 seconds. Set your client’s tool timeout to at least 120 seconds where configurable.

Free

get_balance

See your remaining credits, subscription plan, and subscription end date. A useful first call after connecting.

INPUT{}

Verify your API key and account connection without spending credits.

Unknown ≠ safe. Missing assessment data is reported as unknown, so your agent can explain uncertainty.

Prompts and reference. Two free prompts and a category reference help the agent interpret the results.

GOOD TO KNOW

MCP setup
and API usage.

Read the project docs
What do I need to connect?

An Inspector account, your API key, Node.js 22 or newer, and an agent that supports stdio MCP servers. View client configurations above and add the configuration to its MCP settings.

How does authentication work?

The local adapter reads your GRIDINSOFT_API_KEY environment variable and authenticates requests to Inspector over HTTPS. Use the key from your profile. Keep it in your local configuration or secret store, out of source control.

Can I try it for free?

The free plan includes 100 credits per month. A domain check costs 3 credits and a URL scan costs 10. Checking your balance, reading prompts, and reading the category reference are free. Explore API plans for more capacity.

Can I use a remote MCP server URL?

Use the local @gridinsoft/mcp-inspector package with stdio. The /mcp/v1 HTTP routes are the REST bridge used by that package, not a Streamable HTTP or SSE MCP server endpoint.

Why can a URL scan take longer?

A URL scan analyzes the live page and can take up to 90 seconds. Allow at least 120 seconds for tool calls in your client where supported. If a request times out, check your balance before retrying; a submitted scan may still complete.

Does a result guarantee that a website is safe?

No. Assessments reflect available evidence and can change. An Unknown verdict or a null score means there is insufficient assessment data. Your agent should surface that uncertainty along with the findings.

FOR CUSTOM INTEGRATIONSExplore the REST bridge referenceEndpoints, authentication, and request formats.

REST API for Custom Integrations

The endpoints below are the JSON REST bridge used by the npm package. Connect MCP clients through the stdio configuration above; /mcp/v1 is a base path, not a Streamable HTTP or SSE endpoint. Public discovery endpoints need no API key. Tool calls and saved contexts require Authorization: Bearer YOUR_API_KEY. Send POST bodies as JSON with Content-Type: application/json.

BASE URL https://inspector.gridinsoft.com/mcp/v1
Endpoint Method Description
/tools GET List available security tools. PUBLIC
/tools/call POST Execute a security tool. PRIVATE
/models GET Describe the Inspector analysis service. PUBLIC
/prompts GET List available suggested prompt templates. PUBLIC
/prompts/get GET Render a prompt using name and arguments[site] or arguments[domain]. PUBLIC
/resources GET List available MCP resources. PUBLIC
/resources/read GET Read the content of a specific resource. PUBLIC
/health GET Check the REST bridge response; this does not run a scan. PUBLIC
/contexts GET List saved analysis contexts. PRIVATE
/contexts/create POST Create a new context. PRIVATE
/contexts/get GET Retrieve a specific context. PRIVATE
/contexts/update POST Update an existing context. PRIVATE
/contexts/delete POST Delete a context using JSON {"id":"CONTEXT_ID"}. PRIVATE

Tool call body: {"name":"inspect_domain","arguments":{"domain":"example.com"}}. Successful tool calls return a content array containing the JSON result as text. Context endpoints are REST features and are not exposed as MCP tools.

Domain Check API Details

The domain/check endpoint provides a fast security assessment by merging real-time scans with GridinSoft's historical database.

ENDPOINT https://inspector.gridinsoft.com/api/v1/domain/check
METHOD POST
COST 3 Credit

Request Format (JSON)

{
  "apikey": "YOUR_API_KEY",
  "domain": "google.com"
}

Response Fields

Field Type Description
subject / domainstringThe normalized domain being checked; both fields contain the same value.
verdictstringThe assessment category, or Unknown when no assessment is available.
data_availablebooleanWhether an assessment is available. False does not mean the domain is safe.
score / reputationnumber, numeric string, or nullReputation score when available. Both fields contain the same value; a null value is unknown.
categoryinteger or nullAssessment category ID, or null when unavailable.
tagsstring, object, array, or nullCategory tags when supplied by the assessment source.
datestring or nullAssessment timestamp when available.
fingerprintstring or nullBehavioral fingerprint when available.
whitelistedbooleanWhether the assessment category is WhiteList.
reportstring or nullReport reference when available.

The npm adapter uses the MCP stdio transport. The HTTP routes above use ordinary REST requests.

MCP CLIENT CONFIGURATION

Connect Inspector
to your MCP client.

Your privacy choices. Essential storage supports your account. Optional analytics helps us improve public product pages. Privacy details