Use Atlas In Claude And ChatGPT.
Atlas as an MCP server. Ask your assistant how exposed a domain is, look up a CVE or run a vulnerability check, right in the chat. No account needed.
Streamable HTTP. Sign-in is OAuth, handled by your assistant: you solve one captcha when you connect.
Install In Your Assistant.
- Open Settings → Connectors.
- Click Add custom connector.
- Name it Atlas and paste the server URL.
- Click Connect, solve the captcha in the tab that opens and press Connect.
- In a chat, turn Atlas on from the tools menu and ask.
What Happens When You Connect.
- 01
Add The Server URL
Paste the address into your assistant. It shows the server as needing authentication.
- 02
Solve One Captcha
A browser tab opens. Solve the captcha and press Connect. No sign-up, no email.
- 03
Ask
Your assistant calls Atlas tools whenever a question needs them, right in the chat.
The Tools Your Assistant Gets.
New Atlas vulnerability checkers show up in your assistant on their own, with no change on your side.
| Tool | What It Does | Try Asking |
|---|---|---|
| scan_domain | Domain risk scan: breached credentials, infected devices, dark web mentions, phishing look-alikes and exposed documents, with letter grades and a score. | How exposed is example.com? |
| get_domain_scan | Fetches a domain scan that was still running. | Used by the assistant on its own. |
| search_cves | Searches the Atlas CVE catalogue by text, severity and KEV status. | Which critical Confluence CVEs are in KEV? |
| get_cve | Full detail for one CVE. | Explain CVE-2026-21589. |
| request_full_report | Emails the full domain report to a work address on that domain. | Send me the full report for example.com. |
| wordpress_exposure | Checks a WordPress site for wp2shell exposure. | Is blog.example.com affected by wp2shell? |
| php_vulnerability_check | Checks a site for PHP2Shell exposure. | Check shop.example.com for PHP2Shell. |
| nodejs_vulnerability_check | Checks a Node.js, Brotli, Bun, Python, Ruby, Envoy or Debian version against HTTP2Shell / Node2Shell. | Is Node 22.4.0 vulnerable to HTTP2Shell? |
| netscaler_vulnerability_check | Checks a Citrix NetScaler for CTX697096 exposure. | Check vpn.example.com for CTX697096. |
| atlassian_vulnerability_check | Checks an Atlassian Data Center instance for CVE-2026-21589. | Is jira.example.com exposed? |
| gitlab_vulnerability_check | Checks a GitLab instance for CVE-2026-110264. | Check gitlab.example.com. |
Fair-Use Limits.
Fresh Domain Scans
Per connection, rolling 24 hours. A recent result comes back free.
Vulnerability Checks
Per connection, per day.
Report Requests
Per connection, per day.
FAQ
Common Questions.
No. The connection is anonymous: solving the captcha once is the only step.
Only what your assistant sends to the tools: the domains, versions and CVE IDs in each call. Your chat history stays with your assistant.
Site checks send the same passive, read-only requests as the Atlas web checkers. Version checks never contact a server at all.
The assistant tells you in the chat. Results you already have stay available, and the limit resets on its own.
Remove the connector in your assistant's settings. Connections nobody uses expire after 30 days.