Use Protego with AI assistants

Available tools and boundaries

• scan_website: run website configuration checks for a public HTTP or HTTPS URL.
• get_scan_report: retrieve a saved report using its 12-character share ID.
• get_workspace_capabilities: describe the website, email, and document workflows.

Only scan sites you own or are authorized to test. Email and document content are not accepted through MCP. The email verifier stays an email workflow; document sanitization stays in the browser workflow.

Cursor

Add this server entry to ~/.cursor/mcp.json, merging it with any existing servers. Replace YOUR_PROTEGO_KEY with your issued key. Keep the key private and out of version control.

{
  "mcpServers": {
    "protego": {
      "url": "https://protego.me/api/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_PROTEGO_KEY"
      }
    }
  }
}

Claude Code

Run this command with your issued key in place of YOUR_PROTEGO_KEY. Treat the command and any shell history containing the key as secret.

claude mcp add --transport http protego https://protego.me/api/mcp --header 'Authorization: Bearer YOUR_PROTEGO_KEY'

Claude.ai

A custom connector would use the endpoint above with an Authorization request header containing Bearer YOUR_PROTEGO_KEY. Request-header authentication is a beta for a limited set of organizations, so this option may not be available to you. Protego does not offer OAuth yet.

ChatGPT

ChatGPT custom MCP servers need OAuth or no authentication. Protego requires a bearer key and does not offer OAuth yet, so this connection is not supported yet.

Example prompts

After connecting a compatible client, replace the example URL or report ID with your authorized target or saved report.

• Use Protego to scan https://example.com, a site I own, and explain the findings and suggested fixes.
• Use get_scan_report to retrieve my saved report with share ID abcdef123456 and summarize the findings.
• Use get_workspace_capabilities to explain which Protego workflows are available through MCP and which use email or the browser.