Use the atlas
where you work.

The same public vulnerability records and constrained site checks are available to software and agent tools. No account or secret key is required for this first read-focused release.

01 / SOFTWARE

Application programming interface

A versioned, machine-readable interface documented from the running application with OpenAPI.

Interactive documentation OpenAPI document

curl "https://flawatlas.com/api/v1/vulnerabilities?q=authentication&limit=5"

02 / AGENTS

Model Context Protocol

Connect an agent to search vulnerabilities, retrieve evidence, queue a site check, and read its unlisted result.

Server card

{
  "mcpServers": {
    "flawatlas": {
      "url": "https://flawatlas.com/mcp"
    }
  }
}

BOUNDARIES / PUBLIC RELEASE

Useful by default. Constrained by design.

Public data Vulnerability records come from the same evidence-linked catalog shown on the website.

Safe checks Scanner submissions use the same destination validation and low-impact request limits as the browser form.

Measured outcomes FlawAtlas records which operation was used and whether it succeeded, never the query, website, token, or returned evidence.