1
Connect Claude Code
Add the Enoki MCP server:Then run
/mcp in a session and authenticate enoki. Enoki opens in your
browser: sign in to app.enokilabs.ai if you
aren’t, check what Claude Code asks to do, and click Allow. Approving
takes a workspace owner or admin. To use an API key instead, see
Connect your agent.2
Register your target
Ask your agent to register your endpoint as a target. It should call
get_setup_guide for the config reference, then create_target —
which fires one live probe and only saves the target if it succeeds. On a
failure it returns a categorized reason (invalid_url / unreachable /
auth_failed / parse_error / no_reply / not_an_endpoint / unknown) so you can
adjust and retry. An agent that needs a key is added in the Enoki app instead
(Connect your agent).3
Run an assessment
With the target’s
model_id, call trigger_assessment to start a run,
then poll get_assessment_status until it’s complete. See
what we test for.4
Read and fix findings
Pull results with
list_findings and get_finding (which includes the
repro). Once you’ve fixed one, close_finding it and run
validate_fix to re-run its attacks and confirm the fix holds.Next steps
MCP tool reference
Every tool, grouped by area, with the scope each needs.
REST API
Drive the same flow from CI/CD or your own code.