Integrations
Dalfox works well on the command line, but it also speaks REST and MCP, ships a SKILL.md for skill-aware agents, and integrates directly into tools like Caido, so you can drive it from almost anywhere.
Pick your integration
- REST API Server: Long-lived HTTP service. Submit scans, poll status, cancel jobs, integrate with Slack, dashboards, CI/CD, and custom tooling.
- MCP Server: A Model Context Protocol stdio server. Exposes Dalfox as a tool for Claude, Cursor, and any MCP-compatible client.
- Agent Skill: A drop-in
SKILL.mdthat teaches Claude Code, Cursor, OpenCode, Codex, and other skill-aware agents how to drive Dalfox safely. Install withnpx skills add hahwul/dalfox. - Caido Workflows: Drive Dalfox from Caido Active Workflows and Findings for real-time automated XSS testing inside your proxy sessions.
All integrations share the exact same scanning engine as the CLI. Results are identical; only the plumbing differs.