> ## Documentation Index
> Fetch the complete documentation index at: https://docs.attaxr.com/llms.txt
> Use this file to discover all available pages before exploring further.

# MCP overview

> Drive Aquila's recon tools from any MCP-compatible client.

Aquila ships a Model Context Protocol server. Point any MCP client — Claude
Desktop, Cursor, your own agent — at Aquila, and the client can call the
same recon tools Hackbot uses.

## Endpoint and auth

The server speaks Streamable HTTP:

```
https://aquila.attaxr.com/mcp
```

Send your personal API key on every call:

```
x-api-key: aquila_YOUR_KEY
```

The server validates the key on every request and scopes every tool call to
your account. Your client sees only your targets, leads, and findings.

## Get a key

Copy your key from Settings in the dashboard, or call
`GET /api/mcp-key` for its status. If a client ever loses the key, `POST
/api/mcp-key/rotate` replaces it. `GET /api/mcp-key/reveal` returns the
plaintext key when the install can still read it. Otherwise rotate
first.

## Tool surface

The server exposes the platform's recon and read tools:

* **Recon.** Subdomain and DNS discovery, web probing, port scanning,
  wordlist search, ASN lookups.
* **Data reads.** Scans, leads, vulnerabilities, events, and dashboards.
* **OOB.** Your out-of-band endpoint and recorded interactions.
* **Updates.** Lead and vulnerability updates for write-capable clients.

The [API reference](/api/overview) documents the HTTP data endpoints the
tools read from. Tool names and schemas follow the MCP standard and your
client lists them at connect time.