Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Intruder (BYOK) — connector documentation

  • MCP endpoint: https://byok-intruder.connectorbay.com/mcp
  • REST API: POST https://byok-intruder.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-intruder.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Intruder Intruder access token, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-intruder.connectorbay.com/health · Tool schemas: https://byok-intruder.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-intruder · agent@connectorbay.com

What Intruder (BYOK) is for

Intruder (BYOK) lets an AI assistant read your own Intruder data through the Intruder API with a key you supply (Intruder access token). Read-only: 11 tools (check_api_health, list_issues, list_issue_occurrences, list_issue_targets, list_fixed_occurrences, list_targets, list_scans, get_scan, list_scan_schedules, list_tags, list_licenses). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.intruder.io. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Intruder. Intruder and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Is my Intruder token valid and which account is it?"
  • "What critical issues does Intruder currently report?"
  • "Which hosts are affected by Intruder issue 1?"
  • "Which targets does Intruder issue 1 affect?"
  • "What vulnerabilities did we fix in Intruder since January?"
  • "Which of my Intruder targets are unresponsive?"

What it does

  • check_api_health: Check that the Intruder API is running and show the email of the account the token belongs to.
  • list_issues: List current security issues found by Intruder, with severity, CVSS score, exploit likelihood, snooze state and first-seen date. Filter by severity, tag, target or date.
  • list_issue_occurrences: List where one issue occurs: affected target, port, protocol, age, CVEs and last scan time.
  • list_issue_targets: List the targets affected by one issue.
  • list_fixed_occurrences: List vulnerabilities that were found and later fixed, with remediation time, severity, host and port. Filter by fix date.
  • list_targets: List the targets Intruder scans, with type, status, last scan time, licence type, tags and WAF detection.
  • list_scans: List Intruder scans with status, type, schedule period and creation time.
  • get_scan: Get one scan: name, status, type, targets, start and completion time, throttling and web-ports-only flags.
  • list_scan_schedules: List recurring scan schedules with period, next scan date, last scan result and the targets or tags they cover.
  • list_tags: List all tags defined in the Intruder account.
  • list_licenses: Show total, consumed and available infrastructure and application licences.

BYOK key

You bring your own Intruder Intruder access token (https://developers.intruder.io/docs/creating-an-access-token). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.intruder.io over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Intruder API (api.intruder.io) with a BYOK key; documentation: https://developers.intruder.io/reference. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Intruder. Intruder and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Intruder account.

Built for: Worldwide. Languages: English.