Use with Manus
Manus can call Vulnify before it acts. It checks an action against your policies and gets ALLOW, DENY, or REVIEW back. Manus adds Vulnify as a custom MCP connector. There is no listing to install from the Manus catalog.
Add the connector
Section titled “Add the connector”- In Manus, open Connectors.
- Choose Create, then Add MCP by URL.
- Fill in the fields:
| Field | Value |
|---|---|
| Name | Vulnify |
| Server URL | https://mcp.vulnify.io/mcp |
| Description | Runtime authorization for AI agents. Check an action against your Vulnify policies before it runs: allow, deny, or send it for human review. |
| Icon (if asked) | https://www.vulnify.io/icon-512.png |
- Choose how to authenticate (below), then save. Manus connects and lists the Vulnify tools.
To import a configuration instead, choose Import MCP by JSON:
{ "mcpServers": { "vulnify": { "url": "https://mcp.vulnify.io/mcp" } } }Authentication
Section titled “Authentication”Sign in with Vulnify (OAuth)
Section titled “Sign in with Vulnify (OAuth)”Leave the credential fields empty. Manus receives the server’s OAuth challenge and opens Sign in with Vulnify. Choose an organization and allow the requested scopes. You get the five sign-in tools: decide_action, get_decision, list_policies, check_action, and test_policies. See Sign in with Vulnify for the scopes.
Revoke access in the app under Settings > Connected apps: app.vulnify.io/settings/connected-apps.
API key (Bearer)
Section titled “API key (Bearer)”If you prefer a key, add this header in the connector’s authentication settings:
Authorization: Bearer <VULNIFY_API_KEY>Create the key in app.vulnify.io. See API keys. An API-key session lists all seven tools. A vln_test_… key stores sandbox events only.
Treat the key like a password. A key with an IP allowlist will reject Manus, because the calls come from the hosted server’s address. See IP allowlists.
Try it
Section titled “Try it”Ask Manus: “Before you email this customer list to an outside address, check it with Vulnify.” Manus calls decide_action, and Vulnify answers ALLOW, DENY, or REVIEW. A person resolves a REVIEW in Vulnify. Manus cannot approve it.
New to Vulnify? Start at vulnify.io. See Vulnify MCP server for the other clients.