The ARMO MCP server lets you ask your AI assistant about your ARMO security data in plain language. It connects Claude, ChatGPT, Cursor, VS Code and any other Model Context Protocol client to your ARMO account.

Your assistant can read findings across vulnerabilities, container images, Kubernetes posture controls, cloud posture, cloud compliance, cloud accounts, runtime incidents, risks, attack chains, inventory and repositories. It can also list the ARMO accounts you have access to. Every tool is read-only: the server can't start a scan, change a setting or dismiss a finding.

ARMO hosts the server, so there is nothing to install. You point your assistant at a URL and sign in with your ARMO account. Sign-in uses standard OAuth 2.1, and your assistant registers itself with ARMO the first time it connects, so you don't need a client ID, client secret or API key.

Connect Your Assistant

Setup differs by assistant. Follow the page for yours:

Sign in & Premissions - Requirements

To sign in you will need The server URL for your sign in region - as below:

You sign in at	Server URL
cloud.armosec.io	https://api.armosec.io/mcp
cloud.us.armosec.io	https://api.us.armosec.io/mcp

Key Notes:

Your assistant sees only what your ARMO role lets you see in the dashboard. Each colleague who connects sees their own view.
A session lasts about an hour. After that, your assistant asks you to sign in again.
Query results aren't cached, so revoking your session takes effect immediately.
Your questions go to your AI assistant's provider. ARMO sees only the tool calls the assistant makes.

Multiple ARMO accounts

If your login can access several ARMO accounts, ask your assistant which accounts you can see, or name one in your question (for example, "show critical CVEs in the staging account"). Without an account name, tools use the account you signed in to. Your role is checked separately in each account.

The account list is fixed at sign-in. If you're added to a new account, sign in to the connector again to use it.

What You Can Ask - Examples:

Area	Prompt Examples
Vulnerabilities	Which of my images have critical CVEs with a fix available? Show exploitable vulnerabilities in workloads that are actually loading the vulnerable package.
Kubernetes Posture/Compliance	Which controls is my production cluster failing against NSA-CISA?
Attack Paths	What attack paths reach a workload that can read secrets?
Threat Detection	Show me runtime incidents from the last day and the workloads they touched.
Repository Scanning	List the repositories we scan and their worst IaC findings.
Cloud Posture	Are any of my AWS accounts failing CIS benchmarks? Which checks fail most often?