GitHub repository
Only the ones you shared
Tools
Actions the model can call, like audit_repository or list_findings.
MCP CONNECTORS & PLUGINS COMING SOON
Aster inside
your AI coding tools.
Soon you’ll ask Claude, Cursor or VS Code to audit a repository, explain a finding or draft a fix, with Aster’s checks behind the answer. It isn’t available yet. Here is how it will work.
Illustration: in an AI coding tool, you ask it to audit demo/storefront. The tool calls Aster’s planned audit_repository tool, Aster reads the repository read-only and returns three findings, and the assistant summarises the high-severity one and offers to draft a fix that asks before anything is written.
WHAT IS MCP
One standard plug
between AI apps and tools.
The Model Context Protocol is an open standard. An AI app (the host) runs a small client for each server it connects to. A server, like Aster’s, describes what it can do, and the model calls it when your question needs it.
Connect. You add Aster once. Your AI app starts an MCP client for it and you sign in with OAuth, so there are no keys to paste.
Discover. The client asks what Aster offers (tools/list) and learns each tool’s name, purpose and inputs.
Call. When your question needs it, the model calls a tool (tools/call audit_repository). Aster reads the repository, read-only.
Answer. Aster returns findings with file, line and evidence. Your AI app shows them and answers in plain language.
Resources
Context it can read, like your latest saved report.
Prompts
Ready-made starters, like “Review my last audit”.
LOCAL · STDIO runs on your machine REMOTE · HTTP + OAUTH hosted, sign in once. Aster plans a hosted server.
PLANNED TOOLS · ILLUSTRATION
Just ask.
Aster does the checking.
Pick a question to see the tool call behind it. Reading tools run without changing anything; anything that could change code asks you first.
audit_repositoryREAD-ONLY{ "repo": "demo/storefront" }RETURNS
- Pinned commit, 94 files read
- 1 HIGH1 MEDIUM1 LOW
- A saved report, same as your dashboard
list_findingsREAD-ONLY{ "repo": "demo/storefront", "severity": "high" }RETURNS
- HIGH User input reaches a raw SQL query
app/api/search.ts· line 9- Evidence lines, secrets redacted
explain_findingREAD-ONLY{ "finding": "sql-raw-query", "level": "beginner" }RETURNS
- What Aster noticed, in one sentence
- Why it matters for your app
- A suggested next step
draft_fixASKS FIRST · PAID PLANS{ "findings": ["sql-raw-query"], "model": "from Aster’s library" }RETURNS
- Model and credit cost shown before it runs
- A patch for you to review
- Nothing written to GitHub
open_draft_prYOUR APPROVAL · ASTER FIXES{ "patch": "fix-search-query", "draft": true }RETURNS
- Only with the separate Aster Fixes authorization
- A new branch and a draft pull request
- Never merged automatically
Planned tools, shown as an illustration. Names, inputs and plan availability may change before launch.
WHERE IT WILL WORK · PLANNED
Your tools speak MCP.
Aster will plug in.
Most AI coding tools can add an MCP server in a minute. Here is where we plan to support Aster, and how you’d add it.
Claudeclaude.ai & desktopSettings → Connectors → add a custom connector
PLANNED- Claude Codeterminal & IDE
PLANNEDclaude mcp add, or the Aster plugin 
CursoreditorSettings → MCP, or
PLANNED.cursor/mcp.json
VS CodeGitHub Copilot agent mode
PLANNED.vscode/mcp.jsonin your workspace
WindsurfCascadeCascade → MCP servers
PLANNED
ChatGPTdeveloper modeConnectors → add a remote server
PLANNED
Copilot CLIterminalAdd a server to its MCP config
PLANNED- Any MCP clientopen standard
Remote server URL + OAuth sign-in
PLANNED
Product names and logos belong to their owners and show where we plan to support Aster. No partnership is implied, and none of these connections is available yet.
CLAUDE CODE PLUGIN · PLANNED
One install.
Commands, agents, server.
A Claude Code plugin is a folder that bundles skills, slash commands, subagents, hooks and MCP servers. You install it from a marketplace with /plugin, and everything arrives together.
Select a file to see what it would add.
aster/ · PLANNED PLUGINILLUSTRATION
MANIFESTNames the plugin “aster”
Version and description, so your marketplace shows what you’re installing.
COMMAND
/aster:auditRun an audit of the current repository from the chat and get the findings back.
COMMAND
/aster:fixDraft a fix for selected findings. Shows the model and cost, and asks before anything is written.
SUBAGENTSecurity reviewer
Claude can hand a diff to this agent, which checks it against Aster’s findings.
HOOK · OPTIONALA gentle reminder
Suggests a fresh audit after a big change. Off unless you turn it on.
MCP SERVERConnects Aster’s tools
The same hosted server as the connector, signed in with OAuth.
Plugins run with your permissions. Install only from sources you trust.
SAFE BY DESIGN
Reads by default.
Then you decide.
The same rules as the dashboard, wherever you use Aster.
- Reading tools only read: audits never write to GitHub
- OAuth sign-in: no API keys to paste, revoke any time
- Tokens are issued for Aster’s server only
- Only the repositories you already shared with Aster
- Fixes show the model and cost first; draft PRs need Aster Fixes
- Never merged automatically
Illustration: reading tools run straight away; the draft_fix tool stops and asks you to allow it, showing the model and credit cost.
SETUP PREVIEW
About a minute to add.
When it ships.
A sneak peek at the setup in each tool. It won’t connect yet: the address below is an example.
claude mcp add --transport http aster <ASTER_MCP_URL — published at launch>
Then run /mcp in Claude Code and sign in with Aster.
{
"mcpServers": {
"aster": { "url": "<ASTER_MCP_URL — published at launch>" }
}
}Cursor asks you to sign in when it connects.
{
"servers": {
"aster": { "type": "http", "url": "<ASTER_MCP_URL — published at launch>" }
}
}Use it from GitHub Copilot in agent mode. Note the top-level key is servers.
- 1Open Settings → Connectors
- 2Choose Add custom connector
- 3Paste the Aster server address
- 4Sign in with Aster and pick what it may read
Works on claude.ai and Claude desktop. Team and Enterprise owners add connectors in organization settings.
QUESTIONS
Coming soon.
Clear answers.
Can I use Aster from my AI coding tool today?
Not yet. The MCP server and the Claude Code plugin are planned and not available. Today you run audits and fixes in the Aster dashboard, and you can paste a finding into any assistant.
What is MCP, in one sentence?
An open standard that lets AI apps such as Claude, Cursor and VS Code connect to outside tools through one common interface, so a tool built once works in many apps.
Will it change my code?
Not on its own. Reading tools only read. Drafting a fix shows the model and cost and asks you first, and publishing a draft pull request still needs the separate Aster Fixes authorization. Nothing is merged automatically.
Which tools will it support, and when?
We plan to start with tools that support remote MCP servers with OAuth, such as Claude, Claude Code, Cursor and VS Code. We don’t publish dates; get notified and we’ll email you when it’s ready.
Will it need a paid plan?
We’ll share plan details at launch. Today, audits start free and AI-assisted fixes are part of paid plans; we expect the same split.
Is it safe to add MCP servers?
Add servers only from sources you trust, check what each tool can do, and keep your AI app’s approval prompts on. Aster’s server will be read-only by default and use OAuth, so you can revoke it any time.
Want it first?
Get notified.
Email us and we’ll write when Aster’s MCP server and plugin are ready. Until then, your first audit is free in the dashboard.