squirrelscan for Cursor

Set up squirrelscan in Cursor: one-click MCP install, add the skills, and run audits from chat or the agent.

Cursor gets squirrelscan as a one-click MCP install plus the audit skills. Cursor can then run audits, read findings as tools, and fix them across your codebase.

1. Install the CLI

The skills and local audits run through the squirrel binary.

bash

curl -fsSL https://install.squirrelscan.com | bash

Local audits are free and run entirely on your machine. Verify with squirrel --version.

2. Add the MCP server

Click Add to Cursor. Cursor opens, shows an approval dialog, and writes the server into your mcp.json.

Add it to ~/.cursor/mcp.json (global) or .cursor/mcp.json (this project). A remote server only needs a url, Cursor auto-negotiates the transport:

json

{
  "mcpServers": {
    "squirrelscan": {
      "url": "https://mcp.squirrelscan.com/mcp"
    }
  }
}

3. Authenticate (for cloud)

Local audits need nothing. For hosted crawling, publishing, and credits, open Settings → Customize (labelled Tools & Integrations in some builds), find squirrelscan, and click Needs login to run the browser flow. From the Cursor CLI: agent mcp login squirrelscan.

4. Install the skills

The MCP server exposes tools; the skills add autonomous audit-and-fix workflows.

bash

npx skills add squirrelscan/squirrelscan

5. Run an audit

In chat or the agent, trigger the skill:

/audit-website

Cursor detects your project’s website and runs the audit. Or be explicit, or use natural language:

/audit-website https://example.com then fix all issues across the codebase

Use the audit-website skill to audit example.com and fix the accessibility issues.

Next steps

Fix your site with an AI agent

A full worked example of the audit-and-fix loop.

Hosted MCP server

The full tool list, auth, and credits.

MCP client setup

Scopes, API-key auth, and JSON config.

Rules reference

Every audit rule and how it’s fixed.

Edit this page