> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mindfort.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# エージェント向けクイックスタート

> AI エージェントにセットアッププロンプトを渡して、MCP 経由で MindFort に接続し、ターゲットを追加し、最初のアセスメントを実行します。

Claude Code、Codex、Cursor、またはその他の MCP クライアントを使用して、MindFort をセットアップし、最初のアセスメントを実行できます。MindFort アカウント、テストを許可されたアプリケーション、およびそのドメインの DNS 設定へのアクセスが必要です。

AI エージェントの場合は、以下のプロンプトの手順に直接従ってください。

このプロンプトをエージェントにコピーしてください。求められたら、ブラウザでのサインインとドメイン検証を完了します。

```text wrap theme={null}
Help me set up MindFort for my organization through the MindFort MCP server. MindFort runs a swarm of AI agents that red-team web apps and APIs to find and confirm vulnerabilities.

1. Connect the MindFort MCP server at https://api.mindfort.app/mcp.
   - Claude Code: claude mcp add --transport http MindFort 'https://api.mindfort.app/mcp', then run /mcp to sign in.
   - Codex: codex mcp add MindFort --url 'https://api.mindfort.app/mcp'
   - Cursor or another client: add it as a remote HTTP MCP server.
   Sign in with my MindFort account in the browser (no API key) and pick my organization.
2. Read the server resource mindfort://guides/start-here. For anything else, open only the pages you need from https://docs.mindfort.ai/llms.txt.
3. Call get_current_context and confirm my organization and role with me. Adding targets needs an owner or admin role.
4. Call list_targets. If my app is already there, reuse it. Otherwise ask me for its URL and whether it is a web app or an API, then add it with create_target. Only add apps I own or am authorized to test.
5. Recommended: ask me for a dedicated test account and add it with create_target_credential. Pick the credential_type that matches how the app signs in (password, magic link, or email, SMS, or authenticator MFA), and put the login URL and any extra steps in login_instructions. For an API target, set api_auth_instructions first. Never use a real customer's account.
6. Call verify_target_domain. It returns a DNS TXT record (record_name and record_value). Ask me to publish it at my DNS provider, or to use Auto setup on the target in the MindFort dashboard. When I confirm, call verify_target_domain again until verified is true. DNS changes can take a few minutes, so do not poll.
7. Confirm with me before you start: an assessment begins active testing and uses credits. Call run_assessment with the target_id and, if we added a login, its target_credential_id. Without it, the agents only test what is reachable without signing in. If it returns assessment_credits_insufficient, tell me to add credits under Billing in the dashboard.
8. An assessment runs for hours. Give me its ID and the stage_progress from get_assessment, then stop. When I ask later, check get_assessment and summarize list_findings with status=ACTIVE and exclude_secured=true.

Review tool warnings before any active testing, and ask me before destructive actions. Live tool schemas override this prompt.
```

接続のヘルプとツールの詳細については、[MCP ガイド](https://docs.mindfort.ai/ja/guides/mcp.md)を参照してください。


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.