superagent_

// get started

Quickstart

Create an account, connect GitHub, and add the MCP server. Three steps, no new workflows.

You already work in your coding agent and GitHub, so that is where Superagent works too: no new workflows or tools to learn. This page walks through the three steps to cover your repos from first prompt to production.

1. Create your account

Sign in to the Superagent dashboard. Your account is where you connect repos, manage API keys, and invite your team. Everything is scoped to an organization, and you can belong to several.

2. Connect to GitHub

From Integrations, install the Superagent Security GitHub App on the repositories you want covered. During installation, choose Only select repositories and pick your repos.

From the next pull request on, Superagent checks every PR: security scan and contributor trust on open and update, plus a supply chain scan whenever dependencies change. Results land as inline comments and check runs on the PR itself. See PR Scans for what each check does.

If your project accepts outside contributions and needs contributor license agreements, also install Open CLA. Install GitHub Apps covers both apps in detail.

3. Add the MCP server

Create an API key under Settings, then point your coding agent at the Superagent MCP server:

https://www.superagent.sh/mcp

Once connected, you can ask your agent things like "list the unresolved high-risk findings" or "start a red-team report on this repo" without leaving your editor. Connection details for Cursor, Claude Code, and Codex CLI are in the MCP server guide.

What happens next

  • Every pull request on a connected repo gets scanned before merge.
  • Start your first red-team engagement from Red team: repository, Web app, agent, or model. See Red Team.
  • Triage what comes back in Findings, and turn confirmed issues into fix PRs.

Next steps