swagger: '2.0'
info:
  title: VulnScope MCP
  description: Run bounded unauthenticated reconnaissance against authorised public websites and retrieve complete stored reports. Full REST and result schemas are at https://vulnscope.illek.ie/openapi.yaml.
  version: 2.0.0
  license:
    name: Proprietary
host: vulnscope.illek.ie
basePath: /
schemes: [https]
security: []
paths:
  /mcp/v2:
    post:
      summary: VulnScope tools
      description: Stateless JSON MCP endpoint exposing scan_website and get_vulnscope_report. Both tools publish input and output JSON Schemas through tools/list. Scan progress is available through the REST NDJSON endpoint.
      x-ms-agentic-protocol: mcp-streamable-1.0
      operationId: InvokeVulnScopeMCP
      consumes: [application/json]
      produces: [application/json]
      responses:
        '200': { description: MCP response }
        '202': { description: MCP notification accepted }
        '400': { description: Invalid JSON or JSON-RPC request }
        '403': { description: Browser origin is not allowed }
        '405': { description: Method is not allowed }
        '415': { description: Content-Type must be application/json }