The full upstream README, mirrored here for reference. Install config, tool schemas, adoption signals, and an original overview live on the Gorgon Scout listing page.
Run AI-driven web-application and API security scans from Claude, or any MCP agent.
Gorgon Scout is a Windows application security scanner (DAST). This is its Model Context Protocol (MCP) server, which lets your AI assistant drive the whole workflow in plain language: ask it to scan a web app or API you are authorised to test, and it records the target, runs the scan, streams progress and findings, and produces a Word report with optional AI analysis.
Works with the free plan of Claude Desktop.
Point your assistant at a target and say "scan this." The connector exposes Scout as typed MCP tools, so the agent can:
Every scan still requires you to confirm the in-scope hostname. Your account credentials are never sent to the model.
This is a proprietary connector to a commercial app. It is not a standalone open-source MCP server.
Advanced: the connector is also published as a .mcpb Desktop Extension you can add to
Claude Desktop manually:
https://storage.googleapis.com/gorgon-scout-downloads/gorgon-scout.mcpb
(It still requires the Gorgon Scout app to be installed.)
A step-by-step guide: https://gorgoncyber.com/scout-claude.html
22 tools across account/sign-in, profile management, spec import, AI auto-record,
interactive auth handling, scan start/poll/cancel, and AI analysis. See
manifest.json for the full list and descriptions.
Gorgon Scout and this connector are products of Gorgon Cyber Pty. Ltd., Melbourne, Australia. Designed for testing applications you own or are explicitly authorised to test.