Remote MCP Setup

Risky Plugins exposes a hosted remote MCP endpoint so your agent can query extension risk intelligence without running a local scanner.

What you get

Hosted SSE MCP transport
API-key authentication
Per-plan quotas and premium tool gating
Usage and audit history in your profile
Stripe-backed upgrades for Basic and Pro plans

Endpoint

https://api.riskyplugins.com/api/v1/mcp

Your own profile page shows the exact endpoint configured for your environment under Profile -> Remote MCP.

Authentication

Generate an API key from Profile -> API Keys and send it on every MCP request:

Authorization: Bearer YOUR_API_KEY

Remote MCP access is enabled on the key automatically when you create it from the profile UI.

Claude Code example

Use the hosted SSE endpoint and the API key you generated from the profile page:

{
	"mcpServers": {
		"riskyplugins": {
			"type": "sse",
			"url": "https://api.riskyplugins.com/api/v1/mcp",
			"headers": {
				"Authorization": "Bearer YOUR_API_KEY"
			}
		}
	}
}

Codex example

Any MCP client that supports remote SSE transport can use the same endpoint and header pattern:

{
	"mcpServers": {
		"riskyplugins": {
			"transport": "sse",
			"url": "https://api.riskyplugins.com/api/v1/mcp",
			"headers": {
				"Authorization": "Bearer YOUR_API_KEY"
			}
		}
	}
}