A side-by-side look at the Magicsword MCP and PageLens AI MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.
Verdict: choose Magicsword MCP for security work as a local process; choose PageLens AI for security over a hosted endpoint. You can also run both side by side in one mcpServers block.
MAGICSWORD_API_KEY, MAGICSWORD_BASE_URL.whoami, list_endpoints, show_endpoint.whoami, list_domains, list_scans.Rows where the two servers differ are marked.
| Spec | M Magicsword MCP | |
|---|---|---|
| Category | Security | Security |
| Quality signal | 53/100 · Good | 49/100 · Fair |
| Install command | Confirmed | Confirmed |
| Transport | Local subprocess (stdio) | Remote HTTP/SSE |
| Auth | API key required | OAuth 2.0 |
| Pricing | BYOK (pay the provider) | Not declared |
| Required env vars | MAGICSWORD_API_KEYMAGICSWORD_BASE_URL | None listed |
| Verified owner | Community listing | Community listing |
| GitHub stars | 0 | 1 |
| Directory activity | 0 views 0 installs 0 upvotes | 3 views 0 installs 0 upvotes |
| Tools | 21 | 4 |
| Full listing | View Magicsword MCP | View PageLens AI |
whoamiReturns organization, key id, and scopes. Always call first when troubleshooting.list_endpointsLists endpoints with optional platform / status / hostname-glob filtering.show_endpointFetches one endpoint with OS, policy, compliance, upgrade, heartbeat, and AMSI details.list_agent_releasesLists available agent versions and per-platform latest releases.find_alertsSearches alerts by severity / ack state / since / hostname / MITRE technique.list_eventsLists audit/block telemetry events, including last-day event review workflows.triage_alertFetches one alert directly with triggering events, metadata, and file context; optionally acknowledges or dismisses it.list_policiesLists policies with current version + mode.show_policyShows one policy by id.manage_policy_rulesLists rules or adds explicit / event-derived rules to a policy by id or name. Avoid explicit flat hash rules for Windows WDAC.apply_policy_to_endpointsResolves endpoints and previews a policy assignment; `confirm=true` applies it after approval.flip_to_enforcingTwo-step preview/confirm flip with a server-issued one-time confirm token. Safety-critical.whoamiConfirm which PageLens account this MCP session is operating on, plus granted OAuth scopes.list_domainsList the domains you've verified ownership of, along with badge tier and the scan currently anchored to the public badge.list_scansList your most recent PageLens scans. Filter by status, domain, or date. Returns a slim summary per scan (id, URL, score, grade, severity counts, and `launchVerdict`). Scans may include `launchContext` with `builderPlatform` and `launchMoment` so agents can frame fixes for the owner's workflow with…get_scanRead the full summary for a single scan: score, grade, owner-first `launchVerdict`, severity counts, launch context, executive summary, top-5 highest-priority findings, and per-persona reviews. For QA Audit scans, `get_scan` also returns a `qaAudit` block containing the product-flow synthesis, jour…Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.
{
"mcpServers": {
"magicsword-mcp": {
"command": "npx",
"args": [
"-y",
"@magicsword-io/magicsword-mcp"
],
"env": {
"MAGICSWORD_API_KEY": "YOUR_MAGICSWORD_API_KEY_HERE",
"MAGICSWORD_BASE_URL": "YOUR_MAGICSWORD_BASE_URL_HERE"
}
}
}
}
{
"mcpServers": {
"pagelens-ai": {
"url": "https://www.pagelensai.com/api/mcp"
}
}
}