Tools

The tools the SentraSec MCP server exposes to your agent. All run against your authenticated workspace over stdio — no network port is opened.

Available tools

security.dast_scanRun a DAST scan against a URL. Returns deduplicated, enriched findings (business impact, technical detail, remediation).
security.list_findingsList findings for a scan or across the workspace.
security.explainExplain a vulnerability by its knowledge-graph node id — description, CWE, OWASP, remediation.
security.suggest_fixSuggest a code-level fix for a finding in a given language.
security.list_rulesList the detection rules available in the engine.
security.list_languagesList languages the scanners support.
security.issue_certIssue a pentest certificate for a set of scans.

Tools follow the standard MCP tool schema — your client discovers them automatically after the server starts. Ask your agent in natural language; it picks the right tool.