From the Solo plan, the Perimetry Cloud MCP server lets an AI assistant that speaks the Model Context Protocol (Claude Desktop, Claude Code and others) read your domains: ask “which of my domains got worse this week?” or “how do I fix the findings of example.com?” and it answers from your latest audits, with the fixes and the DNS records ready to copy.

What the assistant can do

Tool	What it gives
`list_domains`	Your domains, their score and grade, open findings by severity, and audit dates.
`get_domain_summary`	The score of one domain, its last audit, the change since the previous one, and the three findings to fix first.
`get_findings`	The open findings of a domain with their fix, the DNS records ready to copy and the related NIS2, Cyber Essentials and ISO 27001 requirements, in English, French or German.
`compare_with_previous_audit`	What changed since the previous audit: score, new and fixed findings, hosts, ports, certificates, look-alikes.
`start_audit` and `get_audit_run`	Start an audit and follow it. Offered only when the key can start audits.

With a read-only key, the assistant can read but never start an audit: the audit tools are not even offered to it.

Connect your assistant

In Perimetry Cloud, open Settings and create an API key named after the assistant, such as “Claude Code”. Leave Can start audits unticked unless you want the assistant to start audits.
In your assistant, add a remote MCP server (Streamable HTTP) at https://app.perimetry.cloud/api/mcp, with the header Authorization: Bearer pc_… and your key in place of pc_….
Restart the assistant or reload its servers, then ask it about your domains.

Any assistant that can reach an MCP server over HTTP and send a header will do. For example, with Claude Code:

claude mcp add --transport http perimetry-cloud https://app.perimetry.cloud/api/mcp --header "Authorization: Bearer pc_…"

The local server and the CI command will be published on npm soon; until then, use the remote MCP endpoint or the API with curl.

Safety

The key stays on your computer (or in your assistant’s settings) and is sent to Perimetry Cloud only. Each tool call counts against the hourly limit of your plan and is written to the journal of API calls.
What the audits report can quote what your sites publish: page titles, HTTP headers, DNS records, names in certificates. The server hands it to the assistant as data, marked as such, and tells it never to follow instructions found there.
Revoke the key in Settings to cut the assistant off at once.