// mcp
Hosted Scan over MCP_
OAuth PKCE, scope scan. Credits meter the run. This connector does not accept payments.
Limited beta · read-only GitHub access
// what it is
Midkernel Scan, callable.
The hosted MCP for Scan is the same product as /security/scan, not a third product. Connect a GitHub repository you authorize, start a hosted review, poll the run, and fetch the report and findings. Same tools as the Cursor plugin. Credits meter runs. No Stripe.
// connect
Existing MCP. OAuth PKCE.
Endpoint https://www.midkernel.com/security/app/mcp. Authenticate with OAuth authorization code and PKCE S256. Scope scan. API bearer tokens exist for clients that do not speak OAuth.
| MCP URL | https://www.midkernel.com/security/app/mcp |
| OAuth issuer | https://www.midkernel.com/security/app |
| Authorization server metadata | https://www.midkernel.com/.well-known/oauth-authorization-server/security/app |
| Grant | OAuth authorization code + PKCE S256 |
| Scope | scan |
// tools
Start, poll, fetch.
| Tool | What it does |
|---|---|
connect_repo | Confirm the read-only GitHub App on repositories you choose. |
list_playbooks | List the review workflows you can run. |
start_run | Start a hosted Scan and debit credits immediately. The result includes credits spent and the remaining balance. |
fetch_run | Poll a run and fetch the report and findings. |
No admin or Threat Intel tools on this MCP.
// access
Access, plan, rate.
// access / plan / rate
A Midkernel account is required. Hosted Scan uses prepaid Midkernel credits (packs never expire; run cost depends on profile). Buy credits on midkernel.com with native USDC on Base only. This connector does not accept payments. Connect a GitHub repository through Midkernel’s read-only GitHub App (no write access). Choose a workflow (default security-review) and a profile (low, balanced, or max) before a run starts. The Midkernel web app shows the credit charge before start. Calling MCP start_run debits credits immediately and returns the amount spent and remaining balance; it has no separate quote or confirmation step. Rate limits and plan details follow the live Midkernel product; see https://www.midkernel.com/security/pricing and https://www.midkernel.com/legal/terms.