Skip to main content
Aquila ships a Model Context Protocol server. Point any MCP client — Claude Desktop, Cursor, your own agent — at Aquila, and the client can call the same recon tools Hackbot uses.

​
Endpoint and auth

The server speaks Streamable HTTP:
Send your personal API key on every call:
The server validates the key on every request and scopes every tool call to your account. Your client sees only your targets, leads, and findings.

​
Get a key

Copy your key from Settings in the dashboard, or call GET /api/mcp-key for its status. If a client ever loses the key, POST /api/mcp-key/rotate replaces it. GET /api/mcp-key/reveal returns the plaintext key when the install can still read it. Otherwise rotate first.

​
Tool surface

The server exposes the platform’s recon and read tools:
  • Recon. Subdomain and DNS discovery, web probing, port scanning, wordlist search, ASN lookups.
  • Data reads. Scans, leads, vulnerabilities, events, and dashboards.
  • OOB. Your out-of-band endpoint and recorded interactions.
  • Updates. Lead and vulnerability updates for write-capable clients.
The API reference documents the HTTP data endpoints the tools read from. Tool names and schemas follow the MCP standard and your client lists them at connect time.