{
    "$schema": "https://static.modelcontextprotocol.io/schemas/mcp-server-card/v1.json",
    "version": "1.0",
    "protocolVersion": "2025-06-18",
    "serverInfo": {
        "name": "panoptic-scans",
        "title": "Panoptic Scans",
        "version": "1.2.0"
    },
    "description": "Vulnerability scanning and vulnerability management. Agents create scans, review findings, and download reports.",
    "iconUrl": "https://panopticscans.com/images/panoptic-scans-logo.png",
    "documentationUrl": "https://panopticscans.com/docs/developer-api",
    "transport": {
        "type": "streamable-http",
        "endpoint": "/mcp"
    },
    "capabilities": {
        "tools": {
            "listChanged": false
        },
        "resources": {
            "subscribe": false,
            "listChanged": false
        },
        "prompts": {
            "listChanged": false
        }
    },
    "authentication": {
        "required": true,
        "schemes": [
            "bearer"
        ]
    },
    "instructions": "POST JSON-RPC to /mcp with Accept: application/json, text/event-stream and Authorization: Bearer. The initialize response sets Mcp-Session-Id; send that header on later requests. An account holder creates an API key, then the agent exchanges it at https://panopticscans.com/api/token. See https://panopticscans.com/auth.md.",
    "tools": [
        "dynamic"
    ],
    "resources": [
        "dynamic"
    ],
    "prompts": [
        "dynamic"
    ]
}