@gunship/mcp

An MCP server that pulls a Gunship finding into your coding agent. Paste the URL of a finding, get its description, severity, CVSS vector, and the endpoints and attack scenarios it is linked to — without copying anything out of the web app by hand.

It exposes one tool:

Tool	Input	Returns
get_finding	url	The finding, plus the target specs and scenarios linked to it, as JSON

Install

npm i -g @gunship/mcp

That puts a gunship-mcp command on your PATH.

Configure

Point your MCP client at the command. For Claude Code, that is .mcp.json in your project:

{
  "mcpServers": {
    "gunship": {
      "command": "gunship-mcp"
    }
  }
}

Create an API token in Gunship under Settings → API tokens, then write it to ~/.gunship/config.yml:

token: your-token-here

Key	Required	Meaning
token	yes	API token from Settings → API tokens

Use

Copy a finding's link with the Copy link button on the findings page, then hand it to your agent:

Fetch this finding and fix it: https://gunship.issuehunt.io/orgs/…/findings/…

The URL has to identify a single finding — that is what the Copy link button gives you.