@askquala/argus-mcp

MCP server for Argus by AskQuala — surfaces your security findings inside Cursor, Claude Code, and any other MCP-aware tool.

Setup

1. Create an API key in Argus: Settings → API → Create API key.
2. Add the server to your MCP host config:

{
  "mcpServers": {
    "argus": {
      "command": "npx",
      "args": ["-y", "@askquala/argus-mcp"],
      "env": {
        "ARGUS_API_KEY": "argus_…"
      }
    }
  }
}

3. Ask your editor's AI things like:
   • "What does Argus say about this repo?"
   • "List my open critical findings."
   • "Apply the fix for finding id and mark it fixed."

Environment

| Var | Default | Description | | --- | --- | --- | | ARGUS_API_KEY | required | Bearer token from Settings → API | | ARGUS_BASE_URL | https://security.askquala.com | Override for self-hosted / staging |

Tools

| Tool | What it does | | --- | --- | | list_findings | Open findings, filter by severity/repo | | get_finding | Full detail — file, line, why-it-matters, Claude-authored fix | | mark_finding | Triage state (fixed / acknowledged / false_positive) | | list_audits | Recent audits in the workspace | | list_repos | Connected repos |

See the full MCP guide in the Argus docs.