StackHawk

Claude Code

1. Run this in a terminal, in your project folder:

claude mcp add --transport stdio stackhawk --env "STACKHAWK_API_KEY=<YOUR_STACKHAWK_API_KEY>" -- uvx stackhawk-mcp

1. Start Claude Code and type /mcp. stackhawk should show as connected.

Add --scope user to make it available in every project. Replace the placeholders with your own values.

Claude Desktop

1. Open Settings → Developer → Edit Config. It opens claude_desktop_config.json. Add:

{
  "mcpServers": {
    "stackhawk": {
      "command": "uvx",
      "args": [
        "stackhawk-mcp"
      ],
      "env": {
        "STACKHAWK_API_KEY": "<YOUR_STACKHAWK_API_KEY>"
      }
    }
  }
}

1. Save the file and restart Claude Desktop. Replace the placeholders with your own values.

Needs uv (Python) on your computer. The file lives in ~/Library/Application Support/Claude/ on macOS and %APPDATA%\Claude\ on Windows.

Cursor

Zu Cursor hinzufügen (öffnet in einem neuen Tab)

Or add it by hand to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project):

{
  "mcpServers": {
    "stackhawk": {
      "command": "uvx",
      "args": [
        "stackhawk-mcp"
      ],
      "env": {
        "STACKHAWK_API_KEY": "<YOUR_STACKHAWK_API_KEY>"
      }
    }
  }
}

Needs uv (Python) on your computer. Replace the placeholders with your own values.

VS Code

Add it to .vscode/mcp.json. VS Code asks for the secret the first time and stores it securely:

{
  "servers": {
    "stackhawk": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "stackhawk-mcp"
      ],
      "env": {
        "STACKHAWK_API_KEY": "${input:stackhawk-api-key}"
      }
    }
  },
  "inputs": [
    {
      "type": "promptString",
      "id": "stackhawk-api-key",
      "description": "STACKHAWK_API_KEY",
      "password": true
    }
  ]
}

Needs uv (Python) on your computer.

Devin Desktop

1. Add it to ~/.config/devin/mcp_config.json (macOS and Linux) or %APPDATA%\devin\mcp_config.json (Windows):

{
  "mcpServers": {
    "stackhawk": {
      "command": "uvx",
      "args": [
        "stackhawk-mcp"
      ],
      "env": {
        "STACKHAWK_API_KEY": "<YOUR_STACKHAWK_API_KEY>"
      }
    }
  }
}

1. Refresh the MCP server list in Cascade. Replace the placeholders with your own values.

Devin Desktop is the new name for Windsurf.

Codex

codex mcp add stackhawk --env "STACKHAWK_API_KEY=<YOUR_STACKHAWK_API_KEY>" -- uvx stackhawk-mcp

Or edit ~/.codex/config.toml directly:

[mcp_servers.stackhawk]
command = "uvx"
args = ["stackhawk-mcp"]
env = { STACKHAWK_API_KEY = "<YOUR_STACKHAWK_API_KEY>" }

Needs uv (Python) on your computer. Replace the placeholders with your own values.

Gemini CLI

gemini mcp add -e "STACKHAWK_API_KEY=<YOUR_STACKHAWK_API_KEY>" stackhawk uvx stackhawk-mcp

This adds it to the current project. Add -s user to use it everywhere.

Any client

Most clients that start local servers accept this shape:

{
  "mcpServers": {
    "stackhawk": {
      "command": "uvx",
      "args": [
        "stackhawk-mcp"
      ],
      "env": {
        "STACKHAWK_API_KEY": "<YOUR_STACKHAWK_API_KEY>"
      }
    }
  }
}

Zed puts servers under context_servers in its settings, with the same command, args and env fields.

Needs uv (Python) on your computer. Replace the placeholders with your own values.

README-Badge

[![StackHawk on mcp.tc](https://mcp.tc/i/stackhawk/badge.svg)](https://mcp.tc/i/stackhawk)

<a href="https://mcp.tc/i/stackhawk"><img src="https://mcp.tc/i/stackhawk/badge.svg" alt="StackHawk on mcp.tc" height="20"></a>

Es folgt dem hellen oder dunklen Modus der Lesenden. Hänge ?theme=light oder ?theme=dark an, um ihn festzulegen, oder ?style=compact, um das Zeichen ohne Schriftzug zu zeigen.

Website-Karte

<script src="https://mcp.tc/w/stackhawk.js" async></script>

Die Karte erscheint dort, wo das Tag steht. Füge dem Tag data-theme="dark" oder data-size="compact" hinzu, um sie zu ändern. Die Datei enthält alles, was sie braucht, stellt also keine weiteren Anfragen und setzt keine Cookies.

iframe

<iframe src="https://mcp.tc/embed/stackhawk" title="StackHawk on mcp.tc" width="420" height="200" loading="lazy" allow="clipboard-write" style="border:0;border-radius:8px;max-width:100%"></iframe>

Nutze es auf Seiten, die keine Skripte erlauben. Hänge ?theme=light oder ?theme=dark an die Adresse an, um die Farben festzulegen.

JSON

Der Eintrag als Daten für deine eigenen Seiten und Tools: Name, Kurzbeschreibung, Installationsbefehl, Tools und die „Add to“-Links. Jede Website kann ihn lesen (CORS ist offen).

https://mcp.tc/i/stackhawk.json

Was jedes Feld bedeutet